Practice Test GeeksMS-100 - Microsoft 365 Identity and Services Practice Test
← All MS-100 Flashcard Decks

Hybrid Identity & Authentication Flashcards

6 cards from real MS-100 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Hybrid Identity & Authentication flashcards as text

  1. Which authentication protocol does Azure AD use for modern authentication with Microsoft 365 services?

    Answer: OAuth 2.0 / OpenID Connect

    Azure AD uses OAuth 2.0 for authorization and OpenID Connect (built on OAuth 2.0) for authentication with modern Microsoft 365 services and applications.

  2. An administrator needs to migrate from AD FS federation to Azure AD Password Hash Synchronization. Which tool assists with this migration?

    Answer: Azure AD Connect wizard's 'Change user sign-in' task

    The Azure AD Connect wizard's 'Change user sign-in' task allows administrators to switch the authentication method from AD FS federation to PHS or PTA.

  3. What is the purpose of the IdFix tool in a hybrid Microsoft 365 deployment?

    Answer: Identifying and remediating Active Directory attribute errors before synchronization

    IdFix scans on-premises Active Directory for attribute formatting errors (like invalid UPNs, duplicate proxy addresses) that would cause synchronization failures with Azure AD.

  4. Which on-premises Active Directory attribute is used as the primary matching anchor between on-premises users and their corresponding Azure AD objects?

    Answer: ms-DS-ConsistencyGuid (sourceAnchor)

    The ms-DS-ConsistencyGuid attribute is the recommended sourceAnchor for Azure AD Connect, providing a stable, mutable identifier for matching on-premises and cloud objects.

  5. What happens to a synchronized user account in Azure AD when the corresponding on-premises Active Directory account is deleted?

    Answer: The Azure AD account is soft-deleted and placed in the recycle bin for 30 days

    When an on-premises AD account is deleted, Azure AD Connect exports the deletion to Azure AD, which soft-deletes the account and retains it in the recycle bin for 30 days.

  6. Which feature in Azure AD Connect allows selective synchronization of specific attributes from on-premises AD to Azure AD without syncing all attributes?

    Answer: Attribute flow customization in sync rules

    Custom synchronization rules in Azure AD Connect allow administrators to configure which specific attributes flow from on-premises AD to Azure AD and how they are transformed.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Eligibility, renewal, exam information · verified Nov 2026
  2. home.pearsonvue.com — Test delivery · verified Oct 2026