MS-102 · Question #62
Your network contains an on-premises Active Directory domain named contoso.com. For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours. You plan…
The correct answer is A. pass-through authentication. With pass-through authentication, the user’s password is validated against the on-premises Active Directory controller. The password doesn't need to be present in Microsoft Entra ID in any form. This allows for on-premises policies, such as sign-in hour restrictions, to be…
Question
Your network contains an on-premises Active Directory domain named contoso.com. For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours. You plan to sync contoso.com to an Azure AD tenant You need to recommend a solution to ensure that the logon hour restrictions apply when synced users sign in to Azure AD. What should you include in the recommendation?
Options
- Apass-through authentication
- Bconditional access policies
- Cpassword synchronization
- DAzure AD Identity Protection policies
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C4% (1)
- D12% (3)
Explanation
With pass-through authentication, the user’s password is validated against the on-premises Active Directory controller. The password doesn't need to be present in Microsoft Entra ID in any form. This allows for on-premises policies, such as sign-in hour restrictions, to be evaluated during authentication to cloud services. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/plan-connect-user-signin
Topics
Community Discussion
No community discussion yet for this question.