You are implementing authentication for applications in your company. You plan to implement self-service password reset (SSPR) and multifactor authentication (MFA) in Azure Active Directory (Azure AD). You need to select authentication mechanisms that can be used for both MFA and SSPR.
Which two authentication methods should you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A . Short Message Service (SMS) messages
B . Authentication app
C . Email addresses
D . Security questions
E . App passwords
Answer: AB
Explanation:
The following authentication mechanisms can be used for both MFA and SSPR:
– Short Message Service (SMS) messages
– Azure AD passwords
– Microsoft Authenticator app
– Voice call
Incorrect Answers:
C, D:
The following authentication mechanisms are used for SSPR only:
– Email addresses
– Security questions
E: App passwords authentication mechanisms can be used for MFA only, but only in certain cases.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods