Skip to main content
Answer confirmed
Question

You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using Azure AD Connect.

You enable password protection for contoso.com.

You need to prevent users from including the word contoso as part of their password.

What should you use?

 

Proposed answer
  • A. the Azure Active Directory admin center
  • B. Active Directory Users and Computers
  • C. Synchronization Service Manager
  • D. Windows Admin Center

 

Suggested answer

A. the Azure Active Directory admin center

Correct answer

The suggested answer is correct

Comments

 

mhmyz

3 months ago 

Selected Answer: A

On-premises Microsoft Entra Password Protection https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-ban-bad-on-premises-deploy

upvoted 2 times 

rasmart

6 months, 1 week ago 

Selected Answer: A

Option A is where we define the banned password lists that the Azure AD Password Protection service uses. we can specify "contoso" as a banned word here, and it will be enforced both in Azure AD and wer on-premises Active Directory, provided we have the Azure AD Password Protection service set up correctly.

upvoted 2 times 

SIAMIANJI

6 months, 3 weeks ago 

Selected Answer: A

The correct answer is: A. the Azure Active Directory admin center You can configure the custom banned password list, which includes preventing the use of the word "contoso" as part of passwords, through the Azure Active Directory admin center. This allows you to enforce password policies centrally for both on-premises AD DS domain and Azure AD users.

upvoted 2 times 

MichalGr

7 months, 2 weeks ago 

M$ Entra admin center -> M$ Entra Password Protection so A.

upvoted 1 times 

fbx01

9 months, 2 weeks ago 

Selected Answer: D

D. Windows Admin Center

upvoted 1 times 

boapaulo

11 months, 2 weeks ago 

To enforce a password policy that prevents users from including specific words, such as "contoso", you must use Group Policy in Active Directory. The appropriate tool for this would be "Active Directory Users and Computers" (B). Active Directory Users and Computers

upvoted 3 times 

Bolo92

11 months, 4 weeks ago 

valid 27.11.23

upvoted 1 times 

Payday123

1 year ago 

Selected Answer: A

Incorrect. Should be A

upvoted 1 times 

NazerRazer

1 year, 1 month ago 

Selected Answer: A

To prevent users from including the word "contoso" as part of their password in an on-premises Active Directory (AD DS) domain that syncs with Azure AD using Azure AD Connect, you should use Azure AD Password Protection. Therefore, the correct option is: A. the Azure Active Directory admin center

upvoted 3 times 

infavolante

1 year, 1 month ago 

Selected Answer: A

Correct answer is A and not D. You can block what you dont want from Azure AD

upvoted 1 times 

CheMetto

1 year, 1 month ago 

Selected Answer: A

The answer is A! I'm using password protection too. I can customize password locked in the azure portal, by going to password protection section

upvoted 1 times 

windowsmodulesinstallerworker

1 year, 1 month ago 

Selected Answer: A

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-operations

upvoted 2 times 

De09z

1 year, 1 month ago 

Can anyone please illustrate how this answer is correct?

upvoted 1 times 

JackBauer

1 year, 1 month ago 

it's not. the answer is definitely A

upvoted 2 times