Microsoft 365 Administrator Expert MS-102 Practice Question

To switch a domain from AD FS federation to cloud-based authentication, you use the MSOnline module cmdlet Set-MsolDomainAuthentication and set the Authentication parameter to Managed. This immediately changes the domain from Federated to Managed without altering the users' UPNs or passwords, allowing the previously installed PTA agent to handle future authentications.

Convert-MsolDomainToStandard can also convert a domain but is intended for scenarios where you need to reset passwords or skip user conversion; it is not required here. Update-AzureADSSOSettings is used for seamless single sign-on, not for changing the domain authentication type. Set-AzureADDomain is part of the newer Graph-based module but does not include a parameter to toggle from Federated to Managed.

Therefore, Set-MsolDomainAuthentication with Authentication set to Managed is the correct choice.