Hybrid Identity & Authentication Flashcards

Which hybrid join type registers a device with both on-premises AD and Azure AD, enabling Conditional Access policies requiring a domain-joined device?

Answer: Hybrid Azure AD joined

Hybrid Azure AD joined devices are joined to both on-premises Active Directory and registered in Azure AD, satisfying Conditional Access policies for compliant or domain-joined devices.

What synchronization rule controls which on-premises Active Directory objects are synchronized to Azure AD using Azure AD Connect?

Answer: All of the above

Azure AD Connect supports OU-based filtering, attribute-based filtering, and domain filtering — all three can be used to control which objects are synchronized to Azure AD.

An organization wants to enforce on-premises Active Directory password policies (including complexity and history) for hybrid users signing into Microsoft 365. Which authentication method achieves this?

Answer: Both B and C

Both Pass-through Authentication and AD FS federation enforce on-premises AD password policies because authentication is validated against on-premises AD in real time.

Which Azure AD Connect staging mode feature is used for?

Answer: Both A and B

Staging mode allows an Azure AD Connect server to import and sync data without exporting to Azure AD, useful for testing rule changes and as a warm standby for failover.

What is the primary purpose of Azure AD Password Protection in a hybrid environment?

Answer: Preventing the use of weak and banned passwords on both on-premises AD and Azure AD

Azure AD Password Protection enforces a global and custom banned password list on-premises by installing DC agents that validate password changes against the banned list.

Which tool should be used to diagnose Azure AD Connect synchronization errors, such as objects not appearing in Azure AD?

Answer: All of the above

All three tools — the troubleshoot task in the wizard, Synchronization Service Manager for operational errors, and Connect Health for health monitoring — are used together to diagnose sync issues.