The correct answers are Properties and Authentication methods.

Properties is the place in the Azure AD password reset settings where you enable self service password reset for users and you choose whether the feature applies to all users or only selected groups. Enabling SSPR for every user is done by configuring Properties and setting the scope to all users.

Authentication methods is where you control which verification methods are allowed and how many are required during password reset enrollment. The setting to require security questions and to specify the number of questions is part of the Authentication methods configuration, which is why this option is needed to require five security questions.

Registration is incorrect because it governs how and when users register their authentication methods and related registration behavior, and it does not enable SSPR for all users nor set the number of security questions.

Cloud Identity is incorrect because it is not an Azure AD setting for SSPR and is not relevant to configuring password reset in an Entra ID environment.

Notifications is incorrect because it only controls email notifications related to password resets and alerts, and it does not enable SSPR or configure the number of security questions.

Customization is incorrect because it deals with the branding and helpdesk information shown on the password reset pages, and it does not enable SSPR or enforce how many security questions users must set.

Full AWS Practitioner Certification Question