Practice Test 1 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company currently has an on-premises forest defined via Active Directory. The forest contains a domain named whizlabs.com. They have set up an Azure subscription. They want to deploy Azure AD Connect to integrate their on-premises Active Directory domain with Azure AD. They have the following key requirements.
- Ensure that password policies are applied to user accounts that are synched to Azure AD.
- Ensure that login restrictions are applied to user accounts that are synched to Azure AD.
- Minimize the number of servers required for the entire implementation.
Which of the following would you consider for the implementation?
A. Federated Identity using Active Directory Federation Services
B. Password Hash synchronization using Active Directory Federation Services
C. Password Hash synchronization with seamless single sign-on
D. Pass-through authentication with seamless single sign-on
Answer – D
The Microsoft documentation has a clear decision tree when it comes to which method to use if you want to use both your on-premises Active Directory and Azure AD. This shows a clear path in case you want to enforce user-level Active directory policies.
Options A and B are incorrect since you would need to implement additional servers for Active Directory Federation Services. And there is a key requirement to reduce the “number of servers required for the entire implementation”.
Option C is incorrect since this would not allow for the enforcement of Active Directory rules.
For more information choosing an authentication approach, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/security/fundamentals/choose-ad-authn
Comments are closed, but trackbacks and pingbacks are open.