Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 3 question 87 discussion

Actual exam question from Microsoft's MS-100

Question #: 87
Topic #: 3

HOTSPOT -
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains five domain controllers.
Your company purchases Microsoft 365 and creates a Microsoft Azure Directory (Azure AD) tenant named contoso.onmicrosoft,com.
You plan to establish federation authentication between on-premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD
FS).
You need to establish the federation.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

The on-premises Active Directory domain is named contoso.com. Before you can configure federation authentication between on-premises Active Directory and the Azure AD tenant, you need to add the domain contoso.com to Microsoft 365. You do this by adding a custom domain name.
The next step is to establish the federation. You can configure AD FS by using Azure AD Connect.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#configuring-federation-with-ad-fs

by Sisko at Jan. 17, 2020, 5:29 p.m.

Comments

Submit Cancel

lucidgreen

Highly Voted 4 years, 5 months ago

Azure AD Connect does all the magic in the console. All you need is to have the domain added to Azure. Unless you have some extra magic you need to do. But that's beyond the scope of this question.

upvoted 9 times

...

Goofer

Highly Voted 5 years, 6 months ago

there are 3 ways to create a Federation. 1. Installation Azure AD Connect --> User Sign-in --> Federation with ADFS 2. Powershell on ADFS server --> Convert-MsolDomainToFederated -DomainName <domain> 3. ADFS console --> create Relying Party Trust 3. Create

upvoted 8 times

WoneSix

5 years, 5 months ago

While the aqbove are true, what you SHOULD use to keep from having errors, is to use AAD Connect to create the federation. It's more foolproof.

upvoted 11 times

...

Moderator

Most Recent 3 years ago

Still a valid question (July 30th 2022), variation on it though (1st anwer).

upvoted 1 times

...

JakeH

3 years, 8 months ago

In exam today

upvoted 1 times

...

mkoprivnj

4 years, 7 months ago

1 & 2 is correct. Add custom domain to AAD tenant and for federation use AAD Connect.

upvoted 5 times

...

Jake1

4 years, 8 months ago

Answer is correct. Azure Active Directory (Azure AD) Connect lets you configure federation with on-premises Active Directory Federation Services (AD FS) and Azure AD.

upvoted 1 times

...

donathon

4 years, 9 months ago

Answer is correct: https://azure.microsoft.com/en-ca/resources/videos/configuring-ad-fs-for-user-sign-in-with-azure-ad-connect/

upvoted 3 times

...

[Removed]

5 years ago

double question again

upvoted 4 times

Alvaroll

4 years, 10 months ago

2-22 https://www.examtopics.com/exams/microsoft/ms-100/view/36/

upvoted 1 times

...

STFN2019

5 years ago

ans is correct

upvoted 2 times

...

juliuscsir

5 years, 4 months ago

Is a custom domain required, since the tenant will be a subdomain of 'onmicrosoft.com'?

upvoted 2 times

melki_zedek

5 years, 2 months ago

Yes a custom domain is required. for a production environment custom domain is preferred over the .onmicrosoft.com

upvoted 1 times

...

VP11

5 years, 4 months ago

If you plan to federate your on-premises Windows Server AD with Azure AD, then you need to select I plan to configure this domain for single sign-on with my local Active Directory when you run the Azure AD Connect tool to synchronize your directories. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

upvoted 1 times

...

Sisko

5 years, 6 months ago

Second drop down should be ADFS Console, shouldn't it?

upvoted 2 times

...