MS-102 · Question #93
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. Implementing federation with Active Directory Federation Services (AD FS) does not meet the requirement because AD FS relies on the on-premises Active Directory, which would make authentication to Microsoft 365 impossible if AD becomes unavailable.
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:
- Users must be able to authenticate successfully to Microsoft 365
services if Active Directory becomes unavailable.
- User passwords must be 10 characters or more.
Solution: Implement pass-through authentication and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(42 responses)- A31% (13)
- B69% (29)
Why each option
Implementing federation with Active Directory Federation Services (AD FS) does not meet the requirement because AD FS relies on the on-premises Active Directory, which would make authentication to Microsoft 365 impossible if AD becomes unavailable.
Federation with AD FS is incorrect because AD FS itself is dependent on the availability of the on-premises Active Directory to perform authentication, thus failing the stated requirement.
If Active Directory becomes unavailable, Active Directory Federation Services (AD FS) will also be unable to authenticate users because AD FS depends on the on-premises AD for user validation. This dependency means that users would not be able to sign in to Microsoft 365 services if the on-premises AD goes down.
Concept tested: Authentication methods resiliency (AD FS)
Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-auth
Topics
Community Discussion
No community discussion yet for this question.