Exam MS-100 topic 1 question 14 discussion

Actual exam question from Microsoft's MS-100

Question #: 14
Topic #: 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company currently has an on-premises Active Directory forest.
You have been tasked with assessing the application of Microsoft 365 and the utilization of an authentication strategy.
You have been informed that the authentication strategy should permit sign in via smart card-based certificates, and also permitting the use of SSO to connect to on-premises and Microsoft 365 services.
Solution: You recommend the use of federation with Active Directory Federation Services (AD FS) as the authentication strategy.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

by Davidchercm at Aug. 14, 2021, 12:41 p.m.

Comments

Submit Cancel

BobDobolina

Highly Voted 3 years, 8 months ago

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

upvoted 7 times

Tonio77s

3 years, 8 months ago

Thanks for the correct link

upvoted 2 times

...

Don123

Most Recent 2 years, 5 months ago

A. Yes Pass-through authentication and seamless SSO with password hash synchronization is a solution that enables users to authenticate to on-premises resources using the same credentials they use for cloud resources. This solution can be used to authenticate users with smart card-based certificates and also permits the use of SSO to connect to on-premises and Microsoft 365 services. Pass-through authentication allows users to authenticate directly against on-premises Active Directory and Seamless SSO automatically signs in users when they are on their corporate devices connected to the corporate network. Password hash synchronization syncs a hash of the users’ on-premises AD password with Azure AD, enabling SSO experience for cloud services. So overall the solution meets the goal by allowing sign in via smart card-based certificates and also permitting the use of SSO to connect to on-premises and Microsoft 365 services.

upvoted 1 times

...

RiTh73

3 years, 4 months ago

Selected Answer: A

Correct

upvoted 1 times

...

Davidchercm

3 years, 10 months ago

answer is correct

upvoted 3 times

...