Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

Users must be able to authenticate successfully to Microsoft 365

services if Active Directory becomes unavailable.

User passwords must be 10 characters or more.

Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

Users must be able to authenticate successfully to Microsoft 365

services if Active Directory becomes unavailable.

User passwords must be 10 characters or more.

Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?

Accepted Answer

A. Yes Password Hash Synchronization (PHS) involves syncing a cryptographic hash of users' on-premises Active Directory passwords to Azure AD. When on-premises Active Directory becomes unavailable, users can still authenticate successfully to Microsoft 365 services by validating their credentials directly against the synced password hash stored in Azure AD. This provides resiliency against on-premises Active Directory outages.

Answer

B. No Password Hash Synchronization is designed to enable authentication to Microsoft 365 services even when on-premises Active Directory is unavailable, as it stores a copy of the password hash in Azure AD.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

Question

Options

How the community answered

Why each option

Topics

Community Discussion