nerdexam
Microsoft

SC-300 · Question #133

You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication. A corporate security policy states the following: Domain con

Sign in or unlock SC-300 to reveal the answer and full explanation for question #133. The question stem and answer options stay visible for context.

Submitted by thandi_sa· Mar 6, 2026Implement authentication and access management

Question

You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant. The tenant uses pass-through authentication. A corporate security policy states the following:

Domain controllers must never communicate directly to the internet. Only required software must be installed on servers. The Active Directory domain contains the on-premises servers shown in the following table. You need to ensure that users can authenticate to Azure AD if a server fails. On which server should you install an additional pass-through authentication agent?

Exhibit

SC-300 question #133 exhibit

Options

  • AServer4
  • BServer2
  • CServer1
  • DServer3

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#pass-through authentication#PTA agent#high availability#Azure AD Connect
Full SC-300 Practice