Skip to main content
Answer confirmed
Preamble

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.

You have an Azure subscription that is linked to a Microsoft Entra tenant named fabrikam.com.

You need to sync contoso.com with fabrikam.com. The solution must meet the following requirements:

  • Support Windows Hello for Business by using a hybrid certificate deployment.
  • Ensure that the passwords in contoso.com do NOT sync to fabnkam.com.
Question

Which Microsoft Entra Connect feature should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

 

Proposed answer

Suggested answer

Correct answer

The suggested answer is correct

 

Comments
Krayzr

4 days, 2 hours ago 

Support Windows Hello for Business by using a hybrid certificate deployment: Device writeback. This feature is necessary for hybrid certificate trust deployments as it allows devices to be registered in Microsoft Entra ID. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization 

Ensure that the passwords in contoso.com do NOT sync with fabrikam.com: Pass-through authentication. This feature allows users to authenticate using their on-premises passwords without syncing the password hashes to Microsoft Entra ID. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-pta

upvoted 1 times 

Ksk08

1 month, 1 week ago 

Answer is correct

upvoted 1 times