AZ-104 Question 17
Single answerYou are an Azure Administrator for a company that wants to enable Self-Service Password Reset (SSPR) only for members of an Azure AD group named 'SSPR_Users'. Which configuration should you select in the Azure AD SSPR settings to ensure only that group can reset their passwords?
- A
Enable SSPR for All
- B
Enable SSPR for Selected
- C
Enable SSPR for None
- D
Enable SSPR for Federated domains only
Show answer and explanation
Correct answer: B
Explanation
To enable SSPR for a specific set of users, you must configure the 'Selected' option in the Azure AD SSPR settings and then specify the Azure AD group whose members will have access to reset their passwords.
- A. Incorrect.
Selecting 'All' enables SSPR for every user in your Azure AD tenant, not just a specific group.
- B. Correct.
Selecting 'Selected' allows you to define a specific group for SSPR, which meets the requirement to limit the feature to 'SSPR_Users'.
- C. Incorrect.
Selecting 'None' disables SSPR completely, which does not meet the requirement of enabling it for a specific group.
- D. Incorrect.
Federated domains only refers to a sign-in method approach, not to targeting a particular Azure AD group.