Hybrid Identity & Authentication Flashcards
6 cards from real MS-100 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Hybrid Identity & Authentication flashcards as text
Which Azure AD Connect synchronization feature allows users to authenticate against on-premises Active Directory while signing into Microsoft 365?
Answer: Pass-through Authentication
Pass-through Authentication (PTA) validates user passwords directly against on-premises AD in real time without storing password hashes in Azure AD.
What is the key advantage of Password Hash Synchronization (PHS) over Pass-through Authentication (PTA) in Azure AD Connect?
Answer: PHS provides authentication continuity if on-premises infrastructure is unavailable
PHS stores a hash of the password hash in Azure AD, allowing cloud authentication to continue even when on-premises AD is offline or unreachable.
Which component of Azure AD Connect Health monitors the synchronization health and latency of object changes from on-premises AD to Azure AD?
Answer: Sync Health agent
The Azure AD Connect Health Sync agent monitors synchronization operations, reports errors, and tracks latency of changes from on-premises AD.
An organization uses AD FS for federation with Azure AD. What is the primary role of the Web Application Proxy (WAP) server in this architecture?
Answer: Publishing AD FS endpoints to the internet for external authentication
Web Application Proxy publishes AD FS endpoints externally, allowing users outside the corporate network to authenticate through AD FS for federated SSO.
Which Azure AD Connect feature enables users to access both on-premises and cloud applications with SSO without entering credentials after the initial sign-in?
Answer: Azure AD Seamless SSO
Azure AD Seamless SSO automatically signs in users on domain-joined devices when they are connected to the corporate network, enabling silent SSO to cloud apps.
What is the minimum number of AD FS servers recommended for a highly available production federation infrastructure?
Answer: 2 AD FS servers + 2 WAP servers
Microsoft recommends a minimum of two AD FS servers behind a load balancer and two Web Application Proxy servers for production high availability.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Eligibility, renewal, exam information · verified Nov 2026
- home.pearsonvue.com — Test delivery · verified Oct 2026