Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

Users must be able to authenticate successfully to Microsoft 365

services if Active Directory becomes unavailable.

User passwords must be 10 characters or more.

Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant. Does this meet the goal?

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

Users must be able to authenticate successfully to Microsoft 365

services if Active Directory becomes unavailable.

User passwords must be 10 characters or more.

Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant. Does this meet the goal?

Accepted Answer

B. No Pass-through Authentication (PTA) works by forwarding user sign-in requests from Azure AD directly to an on-premises agent, which then validates the credentials against the on-premises Active Directory. If the on-premises Active Directory becomes unavailable, the authentication process cannot be completed, preventing users from logging into Microsoft 365 services.

Answer

A. Yes Pass-through Authentication requires a direct connection to the on-premises Active Directory to validate user credentials, meaning it cannot function if the directory is unavailable.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

Question

Options

How the community answered

Why each option

Topics

Community Discussion