AZ-305 · Question 05 · Domain 1.2: Authentication and Authorization
A defense contractor is migrating to Microsoft 365 and Azure. They have a strict security policy stating that no user password hashes, even in synchronized or encrypted form, can ever be stored in the cloud.
They require Single Sign-On (SSO) for their 10,000 employees. The on-premises Active Directory must be the sole authority for authentication. If the on-premises internet connection fails, users should NOT be able to authenticate to cloud services.
Which hybrid identity authentication method should you recommend?
Answer options:
Password Hash Synchronization (PHS) with Seamless SSO
Pass-through Authentication (PTA) with Seamless SSO
Active Directory Federation Services (AD FS)
Azure AD Domain Services (Azure AD DS)
55 questions · hints · full answers · grading
Expert