nerdexam
Microsoft

AZ-500 · Question #79

You have a hybrid configuration of Azure Active Directory (Azure AD). You have an Azure SQL Database instance that is configured to support Azure AD authentication. Database developers must connect…

The correct answer is A. Active Directory -Password. Explanation Active Directory - Password is correct because it allows developers to authenticate using their on-premises Active Directory credentials (username and password) that are synchronized to Azure AD via hybrid configuration, requiring only a single authentication prompt…

Submitted by omar99· Mar 6, 2026Secure identity and access

Question

You have a hybrid configuration of Azure Active Directory (Azure AD). You have an Azure SQL Database instance that is configured to support Azure AD authentication. Database developers must connect to the database instance and authenticate by using their on- premises Active Directory account. You need to ensure that developers can connect to the instance by using Microsoft SQL Server Management Studio. The solution must minimize authentication prompts. Which authentication method should you recommend?

Options

  • AActive Directory -Password
  • BActive Directory -Universal with MFA support
  • CSQL Server Authentication
  • DActive Directory -Integrated

How the community answered

(36 responses)
  • A
    75% (27)
  • B
    14% (5)
  • C
    3% (1)
  • D
    8% (3)

Explanation

Explanation

Active Directory - Password is correct because it allows developers to authenticate using their on-premises Active Directory credentials (username and password) that are synchronized to Azure AD via hybrid configuration, requiring only a single authentication prompt - satisfying the "minimize authentication prompts" requirement.

Active Directory - Universal with MFA (B) is incorrect because while it supports hybrid environments, MFA introduces additional authentication prompts (e.g., phone verification), which contradicts the requirement to minimize prompts. SQL Server Authentication (C) is incorrect because it uses SQL-specific credentials rather than on-premises AD accounts, failing the requirement to use existing directory identities. Active Directory - Integrated (D) is incorrect because it relies on Windows-integrated authentication using the currently logged-in Windows session - this works seamlessly only when the developer is domain-joined and running on a machine directly connected to the corporate network; it may not reliably authenticate hybrid AD users in all scenarios without additional configuration.

Memory Tip: Think of it this way - "Integrated" = silent Windows session (no prompt at all, but requires domain-joined machine), "Password" = one prompt (minimized), and "Universal with MFA" = multiple prompts. When the question says "minimize prompts" in a hybrid setup, Password is your safest single-prompt choice.

Topics

#Azure AD Authentication#Azure SQL Database#Hybrid Identity#SSMS

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice