Exam
Answer confirmed
Question
Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.
You need to ensure that when an on-premises user signs in to Microsoft Entra, the authentication request is validated by an on-premises AD DS domain controller. The solution must minimize administrative effort.
What should you enable?
Proposed answer
federation with Active Directory Federation Services (AD FS)
federation with PingFederate
pass-through authentication
password hash synchronization
Correct answer
pass-through authentication
- Incorrect - Federation with AD FS is incorrect because, while authentication is processed, on-premises administrative effort is high.
- Incorrect - Federation with PingFederate is incorrect, because while authentication is processed, on-premises administrative effort is high.
- Correct - Pass-through authentication is correct because authentication is processed on-premises AD DS with low administrative effort.
- Incorrect - Password hash synchronization is incorrect because authentication is processed in Microsoft Entra and has low administrative effort.
Implement Seamless Single Sign-On - Training | Microsoft Learn