Microsoft
AZ-305 · Question #200
Hotspot Question You have the Free edition of a hybrid Azure Active Directory (Azure AD) tenant. The tenant uses password hash synchronization. You need to recommend a solution to meet the following r
Sign in or unlock AZ-305 to reveal the answer and full explanation for question #200. The question stem and answer options stay visible for context.
Submitted by suresh_in· Mar 6, 2026Design identity, governance, and monitoring solutions
Question
Hotspot Question You have the Free edition of a hybrid Azure Active Directory (Azure AD) tenant. The tenant uses password hash synchronization. You need to recommend a solution to meet the following requirements: - Prevent Active Directory domain user accounts from being locked out as the result of brute force attacks targeting Azure AD user accounts. - Block legacy authentication attempts to Azure AD integrated apps. - Minimize costs. What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibits
Answer Area
- To protect against brute force attacks:Azure AD Password ProtectionConditional access policiesPass-through authenticationSmart lockout
- To block legacy authentication attempts:Azure AD Application ProxyAzure AD Password ProtectionConditional access policiesEnable Security defaults
Unlock AZ-305 to see the answer
You've previewed enough free AZ-305 questions. Unlock AZ-305 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure AD Password Protection#smart lockout#legacy authentication blocking#Security defaults