- 4 views
Exam
Answer confirmed
Preamble
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.
You have an Azure subscription that is linked to a Microsoft Entra tenant named fabrikam.com.
You need to sync contoso.com with fabrikam.com. The solution must meet the following requirements:
- Support Windows Hello for Business by using a hybrid certificate deployment.
- Ensure that the passwords in contoso.com do NOT sync to fabnkam.com.
Question
Which Microsoft Entra Connect feature should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Proposed answer

Suggested answer

Correct answer
The suggested answer is correct
Krayzr
4 days, 2 hours ago
Support Windows Hello for Business by using a hybrid certificate deployment: Device writeback. This feature is necessary for hybrid certificate trust deployments as it allows devices to be registered in Microsoft Entra ID. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization
Ensure that the passwords in contoso.com do NOT sync with fabrikam.com: Pass-through authentication. This feature allows users to authenticate using their on-premises passwords without syncing the password hashes to Microsoft Entra ID. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-pta
upvoted 1 times
Ksk08
1 month, 1 week ago
Answer is correct
upvoted 1 times