AZ-800 · Question #176
You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using Azure AD Connect. You enable password protection for contoso.com. You need…
The correct answer is A. the Azure Active Directory admin center. Azure AD Password Protection includes a custom banned password list feature, which is configured in the Azure Active Directory admin center under Security > Authentication methods > Password protection. Adding 'contoso' to the custom banned password list prevents users (both…
Question
You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using Azure AD Connect. You enable password protection for contoso.com. You need to prevent users from including the word contoso as part of their password. What should you use?
Options
- Athe Azure Active Directory admin center
- BActive Directory Users and Computers
- CSynchronization Service Manager
- DWindows Admin Center
How the community answered
(68 responses)- A84% (57)
- B9% (6)
- C4% (3)
- D3% (2)
Explanation
Azure AD Password Protection includes a custom banned password list feature, which is configured in the Azure Active Directory admin center under Security > Authentication methods > Password protection. Adding 'contoso' to the custom banned password list prevents users (both cloud and on-premises via the Password Protection proxy agent) from using it in their passwords. Azure AD Connect (and Synchronization Service Manager) handles directory synchronization, not password policy configuration. Active Directory Users and Computers manages AD objects like users and groups, not Azure AD password protection policies. Windows Admin Center is a server management tool and does not configure Azure AD password protection settings.
Topics
Community Discussion
No community discussion yet for this question.