Exam 70-346 topic 7 question 21 discussion

Actual exam question from Microsoft's 70-346

Question #: 21
Topic #: 7

Contoso, Ltd., has an Office 365 tenant. You configure Office 365 to use the domain contoso.com, and you verify the domain. You deploy and configure Active
Directory Federation Services (AD FS) and Azure Active Directory Connect with password synchronization. You connect to Azure Active Directory by using a
Remote PowerShell session.
You need to switch from using password-synced passwords to using AD FS on the Office 365 verified domain.
Which Windows PowerShell command should you run?

A. Convert-MsolDomainToFederated –DomainName contoso.com
B. Convert-MsolDomainToStandard –DomainName contoso.com
C. Convert-MsolFederatedUser
D. Set-MsolDomainAuthentication –DomainName contoso.com

Show Suggested Answer

Suggested Answer: A 🗳️
The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on (also known as identity federation), including configuring the relying party trust settings between the Active Directory Federation Services (AD FS) server and the Microsoft Online Services. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in; no action is required by the administrator.
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/convert-msoldomaintofederated?view=azureadps-1.0

by thanhtq00104 at April 4, 2025, 6:20 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!