Exam SC-300 topic 1 question 23 discussion

Actual exam question from Microsoft's SC-300

Question #: 23
Topic #: 1

You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication.
A corporate security policy states the following:
✑ Domain controllers must never communicate directly to the internet.
✑ Only required software must be installed on servers.
The Active Directory domain contains the on-premises servers shown in the following table.

You need to ensure that users can authenticate to Azure AD if a server fails.
On which server should you install an additional pass-through authentication agent?

A. Server4
B. Server2
C. Server1
D. Server3

Show Suggested Answer

Suggested Answer: A 🗳️

by Nilz76 at April 22, 2022, 9:41 a.m.

Comments

Submit Cancel

Nilz76

Highly Voted 2 years, 7 months ago

Selected Answer: A

Server 4 The standalone Authentication Agents can be installed on any Windows Server 2016 or later, with TLS 1.2 enabled. The server needs to be on the same Active Directory forest as the users whose passwords you need to validate.

upvoted 20 times

...

1 year, 9 months ago

server 4 is correct, tested and worked

upvoted 2 times

...

ANDRESCB1988

2 years ago

Server 4 is correct

upvoted 1 times

...

slick_orange

2 years, 3 months ago

Agree. A. Server 4. Although it got me confused a bit because I didn't check the answer properly. I always imagine, A. Server 1, B. Server 2, etc. So, be careful during the exam.

upvoted 2 times

...