Exam AZ-300 topic 16 question 24 discussion

Actual exam question from Microsoft's AZ-300

Question #: 24
Topic #: 16

[All AZ-300 Questions]

You need to recommend an identity solution that meets the technical requirements.
What should you recommend?

A. cloud-only user accounts
B. password hash synchronization and single sign-on (SSO)
C. Pass-through Authentication and single sign-on (SSO)
D. federated single sign-on (SSO) and Active Directory Federation Services (AD FS)

Show Suggested Answer

Suggested Answer: C 🗳️
With Pass-through Authentication the on-premises passwords are never stored in the cloud in any form.
Scenario:
✑ Prevent user passwords or hashes of passwords from being stored in Azure.
✑ Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
✑ Minimize administrative effort whenever possible.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta
Develop for the Cloud

by capibar at May 27, 2020, 2:22 p.m.

Comments

Submit Cancel

gboyega

4 years, 10 months ago

Given answer is correct

upvoted 4 times

...

capibar

5 years ago

C is correct. According to the https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta On-premises passwords are never stored in the cloud in any form.

upvoted 4 times

...