Microsoft Azure Administrator Associate AZ-104 Practice Question

To require users to provide two forms of authentication when resetting their passwords through self-service, you need to set the Number of methods required to reset to 2 in the password reset settings. This ensures that users must verify their identity using two registered authentication methods, enhancing security during the password reset process. Enabling Microsoft Entra multifactor authentication (MFA) is related to sign-in authentication but does not directly control the number of methods for the password reset process itself. Configuring password complexity requirements impacts how passwords are created, not how they are reset. Enabling password writeback allows password changes in Microsoft Entra ID to be synchronized back to an on-premises Active Directory environment but does not influence the number of authentication methods required for SSPR.