Exam MS-100 topic 4 question 77 discussion

Actual exam question from Microsoft's MS-100

Question #: 77
Topic #: 4

Your on-premises network contains an Active Directory domain.

You have a Microsoft 365 subscription.

You need to sync the domain with the subscription. The solution must meet the following requirements:

• On-premises Active Directory password complexity policies must be enforced.
• Users must be able to use self-service password reset (SSPR) in Azure AD.

What should you use?

A. Azure AD Seamless Single Sign-On (Azure AD Seamless SSO)
B. pass-through authentication
C. password hash synchronization
D. Azure AD Identity Protection

Show Suggested Answer

Suggested Answer: C 🗳️

by certacc at Jan. 31, 2023, 9:52 a.m.

Comments

Submit Cancel

Amir1909

1 year, 4 months ago

B is correct

upvoted 1 times

...

itelium

1 year, 11 months ago

If SSPR writeback is configured and the user's password is managed on-premises, the user is allowed to proceed to authenticate and reset their password. If SSPR writeback isn't deployed and the user's password is managed on-premises, the user is asked to contact their administrator to reset their password. Source : https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#:~:text=is%20using%20federated%2C-,pass,-%2Dthrough%20authentication%2C%20or

upvoted 1 times

itelium

1 year, 11 months ago

So the correct answer is B

upvoted 1 times

...

mrwhite

2 years, 1 month ago

Selected Answer: B

According to me it should be B. Pass-through authentication will enforce user-level AD security polices.

upvoted 1 times

...

JamesWilliams

2 years, 3 months ago

Selected Answer: C

Para sincronizar o domínio com a assinatura do Microsoft 365, aplicar as políticas locais de complexidade de senha do Active Directory e permitir que os usuários usem a redefinição de senha de autoatendimento (SSPR) no Azure AD, a melhor opção é utilizar a sincronização de hash de senha (C).

upvoted 2 times

...

bsaksham

2 years, 4 months ago

Selected Answer: C

For SSPR to work, i will go with Hash Sync

upvoted 2 times

...

certacc

2 years, 4 months ago

I feel like there is something missing in this question. The on-premises password policy will be enforced for both hash and passthrough. Both hash and passthrough support SSPR. Given Microsoft recommend hash over pass through I'd be going with hash unless the question is slightly different in the exam.

upvoted 2 times

...