You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure…

Question

Options

• ADeploy the Azure AD Password Protection proxy service to the on premises network.
• BRun the Microsoft Azure Active Directory Connect wizard and select Password writeback.
• CGrant the Change password permission for the domain to the Azure AD Connect service account.
• DGrant the impersonate a client after authentication user right to the Azure AD Connect service account.

• A
  6% (1)
• B
  82% (14)
• C
  6% (1)
• D
  6% (1)

Explanation

Password Writeback is an Azure AD Connect feature that synchronizes passwords reset via Azure AD SSPR back to the on-premises AD DS. Without it, a password reset in Azure AD would not propagate to the on-premises directory, so users could not authenticate to on-premises resources with the new password. Option A (Password Protection proxy) enforces Azure AD password policies on-premises but does not write back passwords. Options C and D address permissions on the Azure AD Connect service account but do not enable the writeback mechanism itself.

No community discussion yet for this question.