Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Identity and Access Administrator Associate · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
OK, presuming the smart lockout reference is the source of truth here. As of today, the default lockout threshold is 10 attempts and the default lockout duration is 60 seconds. THIS is just to mention that 300 secs is not the current default anymore (might have been 2 years ago). ALSO be aware that the 'last three identical hashes'-principle is still valid, and the lockout counter is really 5, meaning that since the user was locked out, someone has changed the default threshold from 10 to 5 without MSFT being so polite to explicitly inform us examinees about this fact! BUT nevertheless, 11 attempts were tracked. Indeed. Read the reference again: "Smart lockout tracks the last three bad password hashes to avoid..." The stress here is on "tracks", and the question was "how many attempts were tracked". FINALLY: SSPR is quite a claim! It will only reset the lockout count to 0 seconds if the user selects the "I forgot my password" option. All in all - absolutely speculative scenario and solution statements. Just learn it by heart and don't mull over it.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
5 Attempts SSPR https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-smart-lockout
OK, presuming the smart lockout reference is the source of truth here. As of today, the default lockout threshold is 10 attempts and the default lockout duration is 60 seconds. THIS is just to mention that 300 secs is not the current default anymore (might have been 2 years ago). ALSO be aware that the 'last three identical hashes'-principle is still valid, and the *lockout counter* is *really* 5, meaning that since the user was locked out, someone has changed the default threshold from 10 to 5 without MSFT being so polite to explicitly inform us examinees about this fact! BUT nevertheless, 11 attempts were *tracked*. Indeed. Read the reference again: "Smart lockout tracks the last three bad password hashes to avoid..." The stress here is on "tracks", and the question was "how many attempts were tracked". FINALLY: SSPR is quite a claim! It will only reset the lockout count to 0 seconds if the user selects the "I forgot my password" option. All in all - absolutely speculative scenario and solution statements. Just learn it by heart and don't mull over it.
i am thinking smart lockout tracks password hashes, not sign-in attempts. So I am going to answer 11, as they are asking "sign-in attempts were tracked". And since they state she was locked out with a 300 value which is not default, I am going to assume someone modified their default settings, allowing the lockout to happen even though it shouldnt have had the samrt lockout feature been on.