ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-300 All Questions

View all questions & answers for the SC-300 exam
Go to Exam

Exam SC-300 topic 1 question 11 discussion

Actual exam question from Microsoft's SC-300
Question #: 11
Topic #: 1
[All SC-300 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant.
You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.
You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.
Solution: You configure pass-through authentication.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by melatocaroca at July 13, 2021, 8:36 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
melatocaroca
Highly Voted 3 years, 11 months ago
YES Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on-premises and cloud-based applications by using the same passwords. Pass-through Authentication signs users in by validating their passwords directly against on-premises Active Directory.
upvoted 18 times
...
MicrosoftAdminUser
Most Recent 2 months, 2 weeks ago
Selected Answer: A
Pass-through Authentication (PTA) allows Azure AD to validate user credentials directly against on-premises Active Directory in real time
upvoted 1 times
...
RITIK1000
5 months, 1 week ago
Selected Answer: B
But just disabling the account will not work because of the sync cycle between AD and AAD so we need to implement CAE(Continous access evaluation) or conditional access policies for the immediate enforcement of account disablement so correct answer should be B
upvoted 2 times
...
AlexBrazil
8 months ago
Selected Answer: A
Microsoft Entra pass-through authentication can solve this issue.
upvoted 2 times
...
RahulX
1 year, 4 months ago
Yes, Pass-through Authentication and ADFS uses on-premises account policy at the time of sign-in in M365.
upvoted 2 times
...
EmnCours
1 year, 10 months ago
Selected Answer: A
Correct Answer: A
upvoted 3 times
...
dule27
2 years, 1 month ago
Selected Answer: A
A: YES - pass-through authentication.
upvoted 2 times
...
ANDRESCB1988
2 years, 7 months ago
correct, answer is yes
upvoted 2 times
...
shine98
3 years ago
On the exam - June 12, 2022
upvoted 1 times
...
DemekeAd
3 years, 2 months ago
Correct Pass-through Authentication enforces the on-premises account policy at the time of sign-in. For example, access is denied when an on-premises user’s account state is disabled, locked out, or their password expires or the logon attempt falls outside the hours when the user is allowed to sign in
upvoted 3 times
...
Iamjudeicon
3 years, 6 months ago
Congratulations @BaderJ for your success. I am preparing to take mine this coming week. I need every encouragement Lol
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel