Your organization has implemented Azure AD Connect to help support its Hybrid cloud initiatives and has synced all on-prem AD users to Azure AD. To meet organization compliance requirements, you…

Question

Options

• AHybrid Authentication
• BFederated Authentication
• CAzure AD Password Hash synchronization
• DAzure AD Pass-through authentication

• A
  10% (4)
• B
  15% (6)
• C
  5% (2)
• D
  69% (27)

Explanation

Explanation

Azure AD Pass-through Authentication (PTA) is correct because it validates user credentials directly against the on-premises Active Directory in real time, meaning your existing on-premises password policies and sign-in hour restrictions are automatically enforced without needing to replicate or manage them separately in the cloud - satisfying compliance with minimal overhead.

Why the others are wrong:

• A. Hybrid Authentication is not a recognized Azure AD authentication method - it's a distractor term with no specific meaning in this context.
• B. Federated Authentication (e.g., ADFS) can enforce on-prem policies but requires significant infrastructure setup and ongoing maintenance, making it not the least overhead option.
• C. Password Hash Synchronization (PHS) syncs a hash of the password to Azure AD, meaning authentication happens in the cloud and bypasses on-premises sign-in hour and password policy enforcement entirely.

Memory Tip: Think of Pass-Through as "passing" the login attempt through to your on-premises AD - because the check happens on-prem, your on-prem rules (policies, sign-in hours) still apply. PHS "copies" credentials to the cloud, so on-prem rules no longer have a say.

No community discussion yet for this question.