exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 3 question 87 discussion

Actual exam question from Microsoft's MS-100
Question #: 87
Topic #: 3
[All MS-100 Questions]

HOTSPOT -
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains five domain controllers.
Your company purchases Microsoft 365 and creates a Microsoft Azure Directory (Azure AD) tenant named contoso.onmicrosoft,com.
You plan to establish federation authentication between on-premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD
FS).
You need to establish the federation.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
The on-premises Active Directory domain is named contoso.com. Before you can configure federation authentication between on-premises Active Directory and the Azure AD tenant, you need to add the domain contoso.com to Microsoft 365. You do this by adding a custom domain name.
The next step is to establish the federation. You can configure AD FS by using Azure AD Connect.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#configuring-federation-with-ad-fs

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
lucidgreen
Highly Voted 4 years, 1 month ago
Azure AD Connect does all the magic in the console. All you need is to have the domain added to Azure. Unless you have some extra magic you need to do. But that's beyond the scope of this question.
upvoted 9 times
...
Goofer
Highly Voted 5 years, 2 months ago
there are 3 ways to create a Federation. 1. Installation Azure AD Connect --> User Sign-in --> Federation with ADFS 2. Powershell on ADFS server --> Convert-MsolDomainToFederated -DomainName <domain> 3. ADFS console --> create Relying Party Trust 3. Create
upvoted 8 times
WoneSix
5 years, 2 months ago
While the aqbove are true, what you SHOULD use to keep from having errors, is to use AAD Connect to create the federation. It's more foolproof.
upvoted 11 times
...
...
Moderator
Most Recent 2 years, 9 months ago
Still a valid question (July 30th 2022), variation on it though (1st anwer).
upvoted 1 times
...
JakeH
3 years, 5 months ago
In exam today
upvoted 1 times
...
mkoprivnj
4 years, 4 months ago
1 & 2 is correct. Add custom domain to AAD tenant and for federation use AAD Connect.
upvoted 5 times
...
Jake1
4 years, 4 months ago
Answer is correct. Azure Active Directory (Azure AD) Connect lets you configure federation with on-premises Active Directory Federation Services (AD FS) and Azure AD.
upvoted 1 times
...
donathon
4 years, 6 months ago
Answer is correct: https://azure.microsoft.com/en-ca/resources/videos/configuring-ad-fs-for-user-sign-in-with-azure-ad-connect/
upvoted 3 times
...
[Removed]
4 years, 9 months ago
double question again
upvoted 4 times
Alvaroll
4 years, 7 months ago
2-22 https://www.examtopics.com/exams/microsoft/ms-100/view/36/
upvoted 1 times
...
...
STFN2019
4 years, 9 months ago
ans is correct
upvoted 2 times
...
juliuscsir
5 years, 1 month ago
Is a custom domain required, since the tenant will be a subdomain of 'onmicrosoft.com'?
upvoted 2 times
melki_zedek
4 years, 11 months ago
Yes a custom domain is required. for a production environment custom domain is preferred over the .onmicrosoft.com
upvoted 1 times
...
...
VP11
5 years, 1 month ago
If you plan to federate your on-premises Windows Server AD with Azure AD, then you need to select I plan to configure this domain for single sign-on with my local Active Directory when you run the Azure AD Connect tool to synchronize your directories. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
upvoted 1 times
...
Sisko
5 years, 3 months ago
Second drop down should be ADFS Console, shouldn't it?
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago