Microsoft 365 Administrator Expert MS-102 Practice Question
Contoso has enabled self-service password reset (SSPR) for all Microsoft Entra ID users. Security policy states that users must be able to reset their passwords only when they are connected from the company's public IP address ranges. Other sign-in activities must remain unaffected. As a Microsoft 365 administrator, which configuration should you implement to enforce this requirement?
Configure a custom banned password list in Microsoft Entra Password Protection that includes the corporate IP address ranges.
Create an Identity Protection sign-in risk policy that requires users to be on a compliant device before resetting passwords.
Create a Conditional Access policy that targets the self-service password reset action and allows access only from a named location containing the corporate IP ranges.
Add the corporate IP ranges to the tenant's MFA trusted IPs list and enable SSPR only for users inside the trusted network.
Self-service password reset can be treated as a separate cloud app or user action in Conditional Access. By creating a Conditional Access policy that targets the SSPR action (or the Azure AD Password Reset cloud app) and restricts access to named locations that represent the corporate public IP ranges, password-reset traffic is allowed only from those addresses while all other sign-in flows remain unchanged. Banned password lists, Identity Protection risk policies, and MFA trusted IPs do not filter SSPR traffic based on network location.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Conditional Access in Microsoft Entra ID?
Open an interactive chat with Bash
How do named locations work in Conditional Access policies?
Open an interactive chat with Bash
Why can't the MFA trusted IPs list be used for SSPR restrictions?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Implement and manage Microsoft Entra identity and access
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .