MS-100 Hybrid Identity & Authentication

Question 1

Which Azure AD Connect synchronization feature allows users to authenticate against on-premises Active Directory while signing into Microsoft 365?

Accepted Answer

Pass-through Authentication

Answer

Pass-through Authentication (PTA) validates user passwords directly against on-premises AD in real time without storing password hashes in Azure AD.

Question 2

What is the key advantage of Password Hash Synchronization (PHS) over Pass-through Authentication (PTA) in Azure AD Connect?

Accepted Answer

PHS provides authentication continuity if on-premises infrastructure is unavailable

Answer

PHS stores a hash of the password hash in Azure AD, allowing cloud authentication to continue even when on-premises AD is offline or unreachable.

Question 3

Which component of Azure AD Connect Health monitors the synchronization health and latency of object changes from on-premises AD to Azure AD?

Accepted Answer

Sync Health agent

Answer

The Azure AD Connect Health Sync agent monitors synchronization operations, reports errors, and tracks latency of changes from on-premises AD.

Question 4

An organization uses AD FS for federation with Azure AD. What is the primary role of the Web Application Proxy (WAP) server in this architecture?

Accepted Answer

Publishing AD FS endpoints to the internet for external authentication

Answer

Web Application Proxy publishes AD FS endpoints externally, allowing users outside the corporate network to authenticate through AD FS for federated SSO.

Question 5

Which Azure AD Connect feature enables users to access both on-premises and cloud applications with SSO without entering credentials after the initial sign-in?

Accepted Answer

Azure AD Seamless SSO

Answer

Azure AD Seamless SSO automatically signs in users on domain-joined devices when they are connected to the corporate network, enabling silent SSO to cloud apps.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Hybrid Identity & Authentication