For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAzure Solutions Architect Expert (AZ-305)Azure Solutions Architect Expert AZ-305 Practice Exam 4Question 12
    Medium1 markMultiple Choice
    Domain 1.2: Authentication and AuthorizationIdentityHybridPTA

    AZ-305 · Question 12 · Domain 1.2: Authentication and Authorization

    A financial institution is designing a hybrid identity solution. They use on-premises Active Directory and want to synchronize identities to Microsoft Entra ID.

    Security policies strictly prohibit any form of user password hashes from being synchronized to or stored in the cloud. However, users must be able to sign in to Microsoft 365 and Azure using their on-premises Active Directory credentials. The solution must provide high availability for authentication even if a single on-premises server fails.

    Which authentication method should you recommend?

    Answer options:

    A.

    Password Hash Synchronization (PHS)

    B.

    Pass-through Authentication (PTA) with multiple Authentication Agents

    C.

    Active Directory Federation Services (AD FS) with a single server

    D.

    Azure AD Domain Services

    How to approach this question

    Identify the constraints: 'no password hashes in cloud' rules out PHS. 'High availability' requires multiple agents/servers. PTA is simpler than ADFS.

    Full Answer

    B.Pass-through Authentication (PTA) with multiple Authentication Agents✓ Correct
    Pass-through Authentication (PTA) with multiple Authentication Agents
    Pass-through Authentication (PTA) allows users to sign in to cloud applications using their on-premises passwords by validating the credentials directly against the on-premises Active Directory. This ensures no password hashes are stored in the cloud. Deploying multiple PTA agents on different on-premises servers provides the required high availability.

    Common mistakes

    Choosing AD FS. While AD FS works, PTA is the modern, simpler recommendation unless specific complex federation requirements exist. Also, the AD FS option listed only has a single server, failing the HA requirement.
    Question 11All questionsQuestion 13

    Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

    55 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ02CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ03CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...HardQ04CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ05CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...Hard
    View all 55 questions →