exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 4 question 49 discussion

Actual exam question from Microsoft's MS-100
Question #: 49
Topic #: 4
[All MS-100 Questions]

Your company has a hybrid deployment of Microsoft 365.
Users authenticate by using pass-through authentication. Several Microsoft Azure AD Connect Authentication Agents are deployed.
You need to verify whether all the Authentication Agents are used for authentication.
What should you do?

  • A. From the Azure portal, use the Troubleshoot option on the Pass-through authentication page.
  • B. From Performance Monitor, use the #PTA authentications counter.
  • C. From the Azure portal, use the Diagnostics settings on the Monitor blade.
  • D. From Performance Monitor, use the Kerberos authentications counter.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
d3an
Highly Voted 5 years, 5 months ago
This should be B - the #PTA counter in Performance Monitor. Troubleshooting in Azure AD will only help if there is an active issue, the question states that you just wish to check that all agents are handling authentication requests. Ref - https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication#performance-monitor-counters
upvoted 32 times
lucidgreen
4 years, 2 months ago
B requires you to check each server individually. A allows you to check all at once. Azure Portal > Azure Active Directory > Azure AD Connect > click on Pass-through authentication. It will take you to the agents and give you their health.
upvoted 6 times
PandaTuga
4 years ago
you can use a single server to collect the #PTA performance counters from several servers
upvoted 1 times
...
lucidgreen
4 years, 2 months ago
And by A, I mean it's wrong because you're looking in the wrong place. You can check it in Azure Portal, is what I meant.
upvoted 1 times
KornienkoBoris
3 years, 10 months ago
In the Azure portal you only check the status of Agent: active or not, but not traffic. For this you need the performance counters. "Pass-through Authentication provides high availability using multiple Authentication Agents, and not load balancing. Depending on your configuration, not all your Authentication Agents receive roughly equal number of requests. It is possible that a specific Authentication Agent receives no traffic at all."
upvoted 2 times
...
...
...
...
Fcnet
Highly Voted 5 years ago
A is right It is asked to verifiy to "whether all the Authentication Agents are used for authentication" so if the agent works fine and is seen with ACTIVE Status from the Azure portal then it can't be used for anything else : authentication. so the answer is A
upvoted 7 times
T_B
5 years ago
A is right, see: https://docs.microsoft.com/nl-nl/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication
upvoted 4 times
...
...
Feyenoord
Most Recent 2 years, 3 months ago
Selected Answer: B
Took some time to set up but it 100% B.
upvoted 1 times
...
Startkabels
2 years, 7 months ago
Selected Answer: B
Confusing questions since both the performance-counters on each server as the "agents-page" in AzureAD-connect can be used to see what agents are "being used". Depends if the question and answers on the exam will be exactly like this. "On the troubleshoot page" should be something like "on the AAD-Connect blade". Under "Agents" you can see what agents are active or inactive cause of on issue. The "Troubleshoot" page one the AAD-Connect blade doesn't contain anything useful. For that reason i'd go for B.
upvoted 1 times
...
jage01
3 years, 3 months ago
Selected Answer: A
Ensure that the Pass-through Authentication feature is still Enabled on your tenant and the status of Authentication Agents shows Active, and not Inactive. A - MS WAY
upvoted 1 times
...
AlexLiourtas
3 years, 5 months ago
Selected Answer: B
answer b PTA
upvoted 3 times
...
melatocaroca
4 years ago
IMHO Answer B not right Performance Monitor counters Another way to monitor Authentication Agents is to track specific Performance Monitor counters on each server where the Authentication Agent is installed. Use the following Global counters (# PTA authentications, #PTA failed authentications and #PTA successful authentications) and Error counters (# PTA authentication errors): Answer A Right Check status of the feature and Authentication Agents Ensure that the Pass-through Authentication feature is still Enabled on your tenant and the status of Authentication Agents shows Active, and not Inactive. You can check status by going to the Azure AD Connect blade on the Azure Active Directory admin center. Reference https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication
upvoted 2 times
...
LoremanReturns
4 years ago
Answer A is the right answer: https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/hybrid/tshoot-connect-pass-through-authentication.md
upvoted 2 times
...
Domza
4 years, 1 month ago
I think, this question could be rephrased in a different way.
upvoted 2 times
...
estarisbourne
4 years, 4 months ago
I am hoping they give credit to either answer as technically both are correct. A and B but I think B is more correct because it goes into the whole being able to see which host is not being used as much reality as load balancing is not exactly a thing and/or if one host experiences issues that the others do not. A bit out of the scope for the question tho
upvoted 1 times
Storm
4 years, 4 months ago
No - A is definately not right.... There is absolutely nothing to see on the "Troubleshoot option" exept some links to help with different sync remidiations... The place people here are referencing "seeing status etc" for each agent, is not in the "Troubleshoot" option. Only correct answer is B...
upvoted 6 times
...
...
[Removed]
4 years, 5 months ago
Agreed with B. You were asked to verify whether Authentication Agents are USED. Use #PTA counter https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication#performance-monitor-counters
upvoted 4 times
bingomutant
4 years, 5 months ago
also note the ALL in the question
upvoted 1 times
...
...
MichaelJS
4 years, 6 months ago
Probably B is right. They probably look for this answer with this question: "Another way to monitor Authentication Agents is to track specific Performance Monitor counters on each server where the Authentication Agent is installed. Use the following Global counters (# PTA authentications, #PTA failed authentications and #PTA successful authentications) and Error counters (# PTA authentication errors)" Ref - https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication#performance-monitor-counters
upvoted 1 times
...
mkoprivnj
4 years, 6 months ago
B for sure!
upvoted 2 times
...
Jake1
4 years, 6 months ago
Answer is definitely B ad d2an said. To monitor Authentication Agents is to track specific Performance Monitor counters on each server where the Authentication Agent is installed. Use the following Global counters (# PTA authentications, #PTA failed authentications and #PTA successful authentications) and Error counters (# PTA authentication errors):
upvoted 1 times
...
itmp
5 years, 2 months ago
Answer is wrong - (this answer is listed as correct on other websites too...) On Azure Active Directory -> Azure AD Connect -> Pass-through authentication you can view the number of agents, authentication agent IP and status (e.g. Active) This indicates that a PTA Agent is authenticated and connected to Azure Service. It does not mean that it is actually capable of authenticating users. The question asks to verify whether Authentication Agents are USED for authentication. That is done with #PTA authentications counter.
upvoted 4 times
VTHAR
4 years, 8 months ago
Agreed! If the question is asking to ensure "all the authentication agents are active" then it would have been A. But since the question is asking "all the authentication agents are used for authentication", you can ONLY verify this with #PTA counter.
upvoted 2 times
VTHAR
4 years, 8 months ago
Correct answer should be "B. From Performance Monitor, use the #PTA authentications counter."
upvoted 1 times
...
Paolo2022
2 years, 7 months ago
You are overthinking this really! I know that MS can be peculiar about the wording of their questions. But, in my opinion, this is definitely about checking whether all the agents are functional - which is what you can do in Azure. Also, I would be VERY surprised, if MS would reward knowlegde about the use of performance counters in current exams. They promote the shift to the cloud - and this is part of an older skill set which is not in focus anymore for them...
upvoted 2 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...