Exam MD-102 topic 1 question 344 discussion

Answer B : Entra junction does not allow access to local domain resources.

According to the following link, Entra joined devices can access on-prem with SSO. "With a Microsoft Entra joined device, your users already have an SSO experience to the cloud apps in your environment. If your environment has Microsoft Entra ID and on-premises AD DS, you might want to expand the scope of your SSO experience to your on-premises Line Of Business (LOB) apps, file shares, and printers." Ref: https://learn.microsoft.com/en-us/entra/identity/devices/device-sso-to-on-premises-resources#:~:text=With%20a%20Microsoft,shares%2C%20and%20printers.

The question is very specific about the need to "Minimize reliance on the on-premises infrastructure for device identity management". Entra ID joined devices can access onprem resource with no problem and no prompts for credentials.

B. From ChatGPT. I did not get anything else. Use Microsoft Entra hybrid joined to achieve: Seamless on-premises resource access via Kerberos authentication. A step toward reducing reliance on on-premises infrastructure by leveraging Microsoft Entra ID for cloud-based identity management.