Which of the following methods is NOT used for resetting passwords in Azure AD?

Resetting passwords in Azure Active Directory (Azure AD) typically involves several secure methods to verify a user's identity before allowing them to reset their password. The correct identification of "username and password recovery" as a non-applicable method aligns with Azure AD's protocols.

Azure AD utilizes multifactor authentication and various recovery options to ensure that a user can reset their password securely. A text message to a phone verifies the user's identity by sending a code that they must enter to continue the reset process. Security questions serve a similar purpose, allowing users to answer preset questions that can confirm their identity. Additionally, mobile app notifications can deliver verification codes or approval requests to trusted devices.

Username and password recovery, however, implies using existing credentials to regain access, which contradicts the principle of secure password recovery mechanisms. This method does not provide a layer of identity verification. As such, it is not a recognized method for securely resetting passwords in Azure AD, as it could potentially expose accounts to unauthorized access if someone obtains a user's username and password.