Exam MS-100 topic 3 question 93 discussion

Actual exam question from Microsoft's MS-100

Question #: 93
Topic #: 3

Your network contains an Active Directory domain.

You have an Azure Active Directory (Azure AD) tenant that has Security defaults enabled.

Azure AD Connect is configured for directory synchronization. Password hash synchronization and pass-through authentication are disabled.

You need to enable Azure AD Identity Protection to detect leaked credentials.

What should you do first?

A. From the Azure Active Directory admin center, disable Security defaults.
B. From Azure AD Connect, enable pass-through authentication.
C. From the Azure Active Directory admin center, configure verifiable credentials.
D. From Azure AD Connect, enable password hash synchronization.

Show Suggested Answer

Suggested Answer: D 🗳️

by fessebook at April 26, 2023, 12:11 p.m.

Comments

Submit Cancel

fessebook

2 years, 2 months ago

Selected Answer: D

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks#leaked-credentials Leaked credentials are processed anytime Microsoft finds a new, publicly available batch. Because of the sensitive nature, the leaked credentials are deleted shortly after processing. Only new leaked credentials found after you enable password hash synchronization (PHS) will be processed against your tenant. Verifying against previously found credential pairs isn't done.

upvoted 3 times

...