Microsoft 365 Administrator — Question 318

You have a Microsoft 365 E5 subscription.
Conditional Access is configured to block high-risk sign-ins for all users.
All users are in France and are registered for multi-factor authentication (MFA).
Users in the media department will travel to various countries during the next month.
You need to ensure that if the media department users are blocked from signing in while traveling, the users can remediate the issue without administrator intervention.
What should you configure?

Answer options

• A. an exclusion group
• B. the MFA registration policy
• C. named locations
• D. self-service password reset (SSPR)

Correct answer: D

Explanation

The correct answer is D, as self-service password reset (SSPR) allows users to recover their accounts and resolve sign-in issues independently. The other options, such as an exclusion group and named locations, would not empower users to fix access problems on their own, while the MFA registration policy does not directly address the issue of blocked sign-ins.