Exam AZ-720 topic 4 question 10 discussion

Actual exam question from Microsoft's AZ-720

Question #: 10
Topic #: 4

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).

An administrator receives an error that password writeback could not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:

Error getting auth token -

You need to resolve the issue.

What should you do?

A. Configure Azure AD Connect using a global administrator account that is not federated.
B. Configure Azure D Connect using a global administrator account with a password that is less than 256 characters.
C. Restart the Azure AD Connect service.
D. Disable password writeback and then enable password writeback using the Azure AD Connect configuration.

Show Suggested Answer

Suggested Answer: A 🗳️

by terawatt at July 21, 2023, 11:54 a.m.

Comments

Submit Cancel

terawatt

1 year, 11 months ago

Selected Answer: A

A. Configure Azure AD Connect using a global administrator account that is not federated. To enable the password writeback feature in Azure AD Connect, you must use a global administrator account that is sourced from Azure Active Directory (Azure AD). This is required to provide the necessary permissions to update passwords in Azure AD. If the account is federated, the federation service (for example, ADFS) would be responsible for authentication and Azure AD wouldn't be able to get the authentication token, resulting in the error observed. Hence, to resolve this issue, you should use a global administrator account that is not federated.

upvoted 1 times

...