MS-102 Question #93: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: - Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. - User passwords must be 10 characters or more. Solution: Implement pass-through authentication and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?

Options

• AYes
• BNo

Explanation

Implementing federation with Active Directory Federation Services (AD FS) does not meet the requirement because AD FS relies on the on-premises Active Directory, which would make authentication to Microsoft 365 impossible if AD becomes unavailable.

Common mistakes.

• A. Federation with AD FS is incorrect because AD FS itself is dependent on the availability of the on-premises Active Directory to perform authentication, thus failing the stated requirement.

Concept tested. Authentication methods resiliency (AD FS)

Reference. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-auth

No community discussion yet for this question.