Microsoft Azure Solutions Architect Expert AZ-305 Practice Question
Contoso has a single on-premises Active Directory forest with 20,000 users. Security policy states that user password hashes must never be stored outside the corporate network. The company will adopt Microsoft 365 and several Azure PaaS workloads and requires: single sign-on from domain-joined devices, high availability, and the fewest additional on-premises servers possible. Which authentication method should you recommend?
Azure AD Password Hash Synchronization with Seamless SSO
Azure AD B2C federated through OpenID Connect
Active Directory Federation Services (AD FS) with smart card authentication
Azure AD Pass-through Authentication with Seamless SSO
Password Hash Synchronization violates the stated policy because the hashes are copied to Azure AD. AD FS can meet the policy but normally requires multiple federation and Web Application Proxy servers, increasing on-premises infrastructure. Azure AD B2C targets external consumer identities and is not intended for corporate employee sign-in to Microsoft 365. Azure AD Pass-through Authentication validates passwords against on-premises Active Directory through lightweight agents; no hashes are stored in Azure AD, and high availability is achieved by installing multiple agents without deploying full AD FS farms. Therefore, Pass-through Authentication with Seamless SSO best satisfies all requirements.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
How does Azure AD Pass-through Authentication work?
Open an interactive chat with Bash
What is Seamless Single Sign-On (SSO) in Azure AD?
Open an interactive chat with Bash
Why is Password Hash Synchronization not recommended in this case?
Open an interactive chat with Bash
Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .