Exam SC-300 topic 2 question 38 discussion

Actual exam question from Microsoft's SC-300

Question #: 38
Topic #: 2

HOTSPOT -

Your on-premises network contains an Active Directory domain that uses Microsoft Entra Connect sync to sync with a Microsoft Entra tenant.

You need to configure Microsoft Entra Connect sync to meet the following requirements:

• Microsoft Entra sign-ins must be authenticated by an Active Directory domain controller.
• Active Directory domain users must be able to use Microsoft Entra self-service password reset (SSPR).
• Minimize administrative effort.

What should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Oskarma at Feb. 2, 2025, 6:46 p.m.

Comments

Submit Cancel

Rackup

3 months, 3 weeks ago

To require that all sign‐ins be validated on‐premises by an Active Directory domain controller while allowing self‐service password resets to flow back to on‐premises AD—and to keep the solution as simple as possible—you would configure: Authentication by the domain controller: Pass‐through authentication This validates user credentials directly against the on‐premises domain controller without the overhead of setting up and managing AD FS. SSPR (Self‐Service Password Reset): Password writeback This ensures that when a user resets their password in the cloud, the new password is written back to the on‐premises Active Directory, keeping both directories in sync.

upvoted 1 times

...

YesPlease

4 months ago

1) Passthrough Authentication 2) Password writeback https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-pta https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr-writeback

upvoted 1 times

...