It is my understanding that Microsoft will never send something such as what I have received.  It begins: "Did you request a password reset for your Microsoft account..." and then provides two separate links: one if I actually requested such a reset, and the other if I did not.  It is signed "Thanks, The Microsoft account team" and was sent to my secondary email address.  It looks highly suspicious, and was not requested by me.

How legitimate is this?