Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question
Your company has an on-premises Active Directory and wants users to sign in to Microsoft 365 with their existing passwords. Security insists that each sign-in be validated against the on-premises domain controllers, and you want to avoid deploying additional AD FS farm servers. Which hybrid identity option should you configure?
Convert all users to cloud-only identities in Microsoft Entra ID.
Implement a federation solution using Active Directory Federation Services (AD FS).
Enable password hash synchronization with Seamless single sign-on.
Configure Microsoft Entra pass-through authentication with Seamless single sign-on.
Pass-through authentication installs lightweight agents that forward the user's password to the on-premises domain controllers for validation, so no password hashes are stored in Microsoft Entra ID. It also supports Seamless SSO without requiring the infrastructure overhead of an AD FS federation farm. Password hash synchronization copies password hashes to the cloud, which the scenario disallows. Federation with AD FS would meet the validation requirement but contradicts the goal to avoid extra AD FS servers. Moving accounts to cloud-only identities eliminates the link to on-premises AD and therefore cannot validate passwords against the local domain.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra pass-through authentication?
Open an interactive chat with Bash
What is Seamless Single Sign-On (SSO)?
Open an interactive chat with Bash
How does Microsoft Entra pass-through authentication differ from password hash synchronization?
Open an interactive chat with Bash
Microsoft Security, Compliance, and Identity Fundamentals SC-900
Describe the capabilities of Microsoft Entra
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .