Exam AZ-301 topic 2 question 39 discussion

Actual exam question from Microsoft's AZ-301

Question #: 39
Topic #: 2

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.
Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.
You need to enable single sign-on (SSO) for company users.
Solution: Install and configure an Azure AD Connect server to use pass-through authentication and select the Enable single sign-on option.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by [deleted] at Jan. 13, 2020, 7:03 p.m.

Comments

Submit Cancel

glam

4 years, 6 months ago

A. Yes

upvoted 2 times

...

sanketshah

4 years, 7 months ago

A is correct

upvoted 3 times

...

mstm

4 years, 11 months ago

Answer is: NO. Provided solution is incomplete, https://autologon.microsoftazuread-sso.com has to added to the Intranet zone settings. Ref.: https://docs.microsoft.com/pl-pl/azure/active-directory/hybrid/how-to-connect-sso-quick-start

upvoted 2 times

...

anameen

5 years, 1 month ago

is it enough? what about Pass-through Authentication Agent installation and config ?

upvoted 1 times

...

[Removed]

5 years, 6 months ago

Does this solve just the one goal? If they want users to be automatically signed in when they are on-prem, don't we need trusted IP ranges as well?

upvoted 4 times

Gineoh

5 years, 6 months ago

Yes should be correct. Researched a little bit: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso --> "It can be enabled via Azure AD Connect."

upvoted 7 times

xofowi5140

5 years, 3 months ago

Seamless SSO can be combined with either the Password Hash Synchronization or Pass-through Authentication sign-in methods. Seamless SSO is not applicable to Active Directory Federation Services (ADFS).

upvoted 16 times

tartar

4 years, 10 months ago

A is ok

upvoted 4 times

us3r

3 years, 6 months ago

ok is A

upvoted 1 times

...