MS-100 Hybrid Identity & Authentication

Question 1

Which Azure AD Connect synchronization feature allows users to authenticate against on-premises Active Directory while signing into Microsoft 365?

Accepted Answer

Pass-through Authentication

Answer

Password Hash Synchronization

Answer

Federation with AD FS

Answer

Seamless SSO

Question 2

What is the key advantage of Password Hash Synchronization (PHS) over Pass-through Authentication (PTA) in Azure AD Connect?

Accepted Answer

PHS provides authentication continuity if on-premises infrastructure is unavailable

Answer

PHS is more secure because passwords never leave the on-premises network

Answer

PHS supports smarter password policies

Answer

PHS is required for Conditional Access policies

Question 3

Which component of Azure AD Connect Health monitors the synchronization health and latency of object changes from on-premises AD to Azure AD?

Accepted Answer

Sync Health agent

Answer

AD FS Health agent

Answer

AD DS Health agent

Answer

Connect Health dashboard

Question 4

An organization uses AD FS for federation with Azure AD. What is the primary role of the Web Application Proxy (WAP) server in this architecture?

Accepted Answer

Publishing AD FS endpoints to the internet for external authentication

Answer

Caching AD FS token requests to improve performance

Answer

Replacing the AD FS proxy role for password-based applications

Answer

Providing load balancing for internal AD FS servers

Question 5

Which Azure AD Connect feature enables users to access both on-premises and cloud applications with SSO without entering credentials after the initial sign-in?

Accepted Answer

Azure AD Seamless SSO

Answer

Password Hash Synchronization

Answer

Pass-through Authentication

Answer

Hybrid Azure AD Join

Question 6

What is the minimum number of AD FS servers recommended for a highly available production federation infrastructure?

Accepted Answer

2 AD FS servers + 2 WAP servers

Answer

1 AD FS server + 1 WAP server

Answer

3 AD FS servers + 2 WAP servers

Answer

2 AD FS servers + 1 WAP server