HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant that contains the user groups shown in the following table.
You enable self-service password reset (SSPR) for Group1.
You configure the Notifications settings as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 1: Yes -
Notify all admins when other admins reset their passwords: Yes.
Box 2: No -
Notify users on password resets: No.
Box 3: No -
✑ Notify users on password resets
If this option is set to Yes, then users resetting their password receive an email notifying them that their password has been changed. The email is sent via the
SSPR portal to their primary and alternate email addresses that are on file in Azure AD. No one else is notified of the reset event.
✑ Notify all admins when other admins reset their passwords
If this option is set to Yes, then all administrators receive an email to their primary email address on file in Azure AD. The email notifies them that another administrator has changed their password by using SSPR.
Example: There are four administrators in an environment. Administrator A resets their password by using SSPR. Administrators B, C, and D receive an email alerting them of the password reset.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr
Based on documentation cited in the answer, admin doesn't get notified of his/her own password reset. So the given answer is correct.
answer is correct, but for a different reason - only 'global administrators' get notifications about admin password change, not all kinds of administrators
can you provide a link to a document please which says that ?
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr "All global admins would be notified when SSPR is used on an admin account."
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr "All global admins would be notified when SSPR is used on an admin account."
so why last is N?
Because user 4 is not any type of admin. Global admin gets notified when someone uses SSPR on an admin account.
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Because user 4 is not any type of admin. Global admin gets notified when someone uses SSPR on an admin account.
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
can you provide a link to a document please which says that ?
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr "All global admins would be notified when SSPR is used on an admin account."
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr "All global admins would be notified when SSPR is used on an admin account."
so why last is N?
Because user 4 is not any type of admin. Global admin gets notified when someone uses SSPR on an admin account.
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Because user 4 is not any type of admin. Global admin gets notified when someone uses SSPR on an admin account.
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
Checked answer #2 is No. The option "Notify all admins when other admins reset their passwords" actually notify all OTHER admin but not user him/herself who reset his/her password. He/She would only get notification if option "Notify users on password resets" is turned on well, for this question. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
and the last question has nothing to do with SSPR (no notifications as it is not a self service action) - - ((admin auditing and alerting is another discussion unrelated to this question))
Answer is correct. Ans Y - User1 is Global Admin. "Azure AD will notify all global admins when someone uses SSPR on an admin account" N - As per below links, all other administrators will receive Notification and not the same admin himself N - This is not an SSPR scenario. (Not Self Service). Here another admin resets password of a user (not that the user himself is resetting password of his own) https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr
Tested in the lab. Answer is N-N-N. With below Justification, none of the mentioned conditions in the question met. Setting: Notify users on password resets? Determines whether or not users receive an email to their primary and alternate email addresses notifying them when their own password has been reset via the Self-Service Password Reset portal Setting: Notify all admins when other admins reset their password? Determines whether or not all global administrators receive an email to their primary email address when other administrators reset their own passwords via the Self-Service Password Reset Portal Password administrators can reset passwords of other users who are non-administrators or members of the following roles only: Directory readers Guest inviter Password administrator User Account administrators can change passwords for users, Helpdesk administrators, and other User Account administrators only
So it should be Y,N,N. User1 IS Global Administrator, right?
On exam 5/15/2021
Yes No -> Notify users on password resets = No No For box 2 => (Notify users on password resets)If this option is set to Yes, users resetting their password receive an email notifying them that their password has been changed. The email is sent via the SSPR portal to their primary and alternate email addresses that are stored in Azure AD. No one else is notified of the reset event.
hc400 pointed correctly given answers are correct.
Took exam today passed this morning was on there 6/21/2021
I had this question in the exam that i took on July 14th 2021
Yes No No is right https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications User1 gets a notification when User3 resets password because User1 is admin and User3 is also an admin. User3 will not get a notification if User3 resets his/her own password because “Notify users on password resets” was set to No
Yes No No For box 1 => https://docs.microsoft.com/es-es/azure/active-directory/authentication/tutorial-enable-sspr To keep users informed about account activity, you can configure e-mail notifications to be sent when an SSPR event happens. These notifications can cover both regular user accounts and admin accounts. For admin accounts, this notification provides an additional layer of awareness when a privileged administrator account password is reset using SSPR. ALL GLOBAL ADMINS WOULD BE NOTIFIED WHEN SSPR IS USED ON AN ADMIN ACCOUNT.
It's Y N N
I believe it should be Y Y N
Box1: user3 resets own password, so notify user1 Box2: user3 resets own password, but user3 doesn't receive own notify Box3: user4 is not admin, so no notify other admin
Y-N-N Notify users on password resets If this option is set to Yes, users resetting their password receive an email notifying them that their password has been changed. Notify all admins when other admins reset their passwords If this option is set to Yes, then all other Azure administrators receive an email to their primary email address stored in Azure AD.
Box1 Yes user1 gets email as an admin has changed their password via sspr Box2 No user3 resets their password so other admins will get emails but not users Box3 Yes Global Admins will get notified regardless.
demonite - Box 3 is NO because Azure AD will notify all global admins when someone uses SSPR on an admin account. Box 3 is talking about resetting a password of non-admin account so, global admin won't be notified and this is given in MS documentation as well for your reference - https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr Please read the section "Set up notifications and customizations" which clearly says that
Given answers are correct, Y N N
I think the answer is YES-YES-NO. In particular user3 gets a notification when resetting his own password
I think it should be NO-NO-NO 1. SSPR is not enabled for User1, hence, password reset will not work 2. User3 resets for herself - no additional notification is sent 3. User4 is not an admin and "notify users" is disabled
Good catch on 1. I think that, regardless of whether User1 is not a member of that group, he should still receive the notifications given that he is a Global Admin. I would pay attention to an answer such as, "User1 changed the password..."
And it's not a self-service password reset, because someone else is doing it.
Answer is N-Y-N I was not convinced with any of ur answer. So I did testing in lab.
The given answer should be correct. Y N N. The second one is N because of this: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
For me answer is corrected N - Y - Y Box 1: User 1 isn't belong to Group 1. so User 1 will not effect by rules. Box 2 & Box 3: both users are belong to Group 1. If's possible to received notifications
Box 1: The policy applies to admins in "Group 1" who use SSPR. But "all other admins" are "all other admins" whether belonging to Group 1 or not. Thus Y. Box 2: N because only "all OTHER admins" receive the notification Box 3: N because does not involve SSPR at all
Notifications To improve awareness of password events, SSPR lets you configure notifications for both the users and identity administrators. Notify users on password resets If this option is set to Yes, users resetting their password receive an email notifying them that their password has been changed. The email is sent via the SSPR portal to their primary and alternate email addresses that are stored in Azure AD. No one else is notified of the reset event. Notify all admins when other admins reset their passwords If this option is set to Yes, then all other Azure administrators receive an email to their primary email address stored in Azure AD. The email notifies them that another administrator has changed their password by using SSPR. Consider the following example scenario: There are four administrators in an environment. Administrator A resets their password by using SSPR. Administrators B, C, and D receive an email alerting them of the password reset. So, it's Y,N,N
Question appeared On AZ-303 exam on 08/12/2021 - 49 questions, 4Q - Fabrikan case study
Y, N, N. Only Global Admin will receive notification.