Microsoft 365 Administrator Expert MS-102 Practice Question

Password hash synchronization copies password hashes from Active Directory to the cloud but does not automatically write new passwords back to the on-premises directory. To make SSPR changes flow from Microsoft Entra ID to Active Directory, you must enable the Password writeback feature in the Microsoft Entra Connect configuration wizard. When this feature is turned on, Entra ID forwards confirmed SSPR password changes to the on-premises connector, which updates the corresponding user account in Active Directory. The other options do not enable writeback: changing the authentication topology to pass-through authentication or adding security questions does not deliver the needed writeback capability, and assigning the Password Administrator role only lets administrators reset passwords for others-it does not affect SSPR writeback.