You are implementing authentication for applications in your company. You plan to implement self-service password reset (SSPR) and multifactor authentication
(MFA) in Azure Active Directory (Azure AD).
You need to select authentication mechanisms that can be used for both MFA and SSPR.
Which two authentication methods should you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Authenticator app

B. Email addresses

C. App passwords

D. Short Message Service (SMS) messages

E. Security questions






 

Suggested Answer: AD

The following authentication mechanisms can be used for both MFA and SSPR:
✑ Short Message Service (SMS) messages
✑ Azure AD passwords
✑ Microsoft Authenticator app
✑ Voice call
Incorrect Answers:
B, E: The following authentication mechanisms are used for SSPR only:
✑ Email addresses
✑ Security questions
E: App passwords authentication mechanisms can be used for MFA only, but only in certain cases.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

This question is in AZ-303 Microsoft Azure Architect Technologies Exam
For getting Microsoft Certified: Azure Solutions Architect Expert Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.