ExpertAZ-305 · Question 05 · Domain 1.2: Authentication and Authorization
A defense contractor is migrating to Microsoft 365 and Azure. They have a strict security policy stating that no user password hashes, even in synchronized or encrypted form, can ever be stored in the cloud.
They require Single Sign-On (SSO) for their 10,000 employees. The on-premises Active Directory must be the sole authority for authentication. If the on-premises internet connection fails, users should NOT be able to authenticate to cloud services.
Which hybrid identity authentication method should you recommend?
A defense contractor is migrating to Microsoft 365 and Azure. They have a strict security policy stating that no user password hashes, even in synchronized or encrypted form, can ever be stored in the cloud.
They require Single Sign-On (SSO) for their 10,000 employees. The on-premises Active Directory must be the sole authority for authentication. If the on-premises internet connection fails, users should NOT be able to authenticate to cloud services.
Which hybrid identity authentication method should you recommend?
Answer options:
Password Hash Synchronization (PHS) with Seamless SSO
Pass-through Authentication (PTA) with Seamless SSO
Active Directory Federation Services (AD FS)
Azure AD Domain Services (Azure AD DS)
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 2
55 questions · hints · full answers · grading