Exam MS-203 topic 3 question 7 discussion

Actual exam question from Microsoft's MS-203

Question #: 7
Topic #: 3

You have a Microsoft Exchange Server 2019 organization.
You implement hybrid connectivity to Microsoft 365.
You need to ensure that users can use the Microsoft Outlook mobile app on their device to access their on-premises mailbox.
What should you do?

A. Run Azure AD Connect.
B. Run Set-CASMailbox -OutlookMobileEnabled for each user.
C. Enable Hybrid Modern Authentication (HMA).
D. Configure Multi Factor Authentication (MFA).

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-hybrid-modern-authentication-for-exchange-on-premises/ba-p/607476

by Exchangist at Sept. 30, 2021, 10:27 p.m.

Comments

Submit Cancel

Exchangist

Highly Voted 2 years, 8 months ago

Yep looks like C is correct: After hybrid Modern Authentication is enabled, all on-premises mobile users can use Outlook for iOS and Android using the Microsoft 365 or Office 365-based architecture. Ref https://docs.microsoft.com/en-us/exchange/clients/outlook-for-ios-and-android/use-hybrid-modern-auth?view=exchserver-2019

upvoted 8 times

kazaki

2 years, 7 months ago

not correct because this is hybrid connection not authentication

upvoted 2 times

...

MSExch11

1 year, 9 months ago

B is correct. Users can use Basic Auth to connect do their Mailbox via Outlook for IOS/Android Outlook for iOS and Android supports two authentication types in Exchange on-premises environments: Basic authentication and hybrid Modern Authentication. https://docs.microsoft.com/en-us/exchange/clients/outlook-for-ios-and-android/outlook-for-ios-and-android?view=exchserver-2019

upvoted 1 times

99redeyeflight

1 year, 9 months ago

Set-CASMailbox -OutlookMobileEnabled is for EXO online so also wrong

upvoted 3 times

...

kazaki

Highly Voted 2 years, 7 months ago

users can use their outlook on mobile by default also all the the answers arent correct

upvoted 5 times

...

Cooljoy7777

Most Recent 8 months, 3 weeks ago

Selected Answer: C

OAuth protects users' passwords: Outlook uses hybrid Modern Authentication (OAuth) to protect users' credentials. Hybrid Modern Authentication provides Outlook with a secure mechanism to access the Exchange data without ever touching or storing a user's credentials. At sign-in, the user authenticates directly against an identity platform (either Azure Active Directory or an on-premises identity provider like ADFS) and receives an access token in return, which grants Outlook access to the user's mailbox or files. The service does not have access to the user's password at any point of time. https://learn.microsoft.com/en-us/exchange/clients/outlook-for-ios-and-android/use-hybrid-modern-auth?view=exchserver-2019

upvoted 1 times

...

Meenous

10 months, 2 weeks ago

All answers are wrong, Accessing on-premise emails is available by default from outlook on mobile, and that is what we call (Unmanaged On-premises cloud cache) Even if you don't have any tenant this should work normally without any requirements https://learn.microsoft.com/en-us/exchange/clients/outlook-for-ios-and-android/use-basic-auth?view=exchserver-2019#connectivity-requirements

upvoted 1 times

...