Examkin

Question

Difficulty: HardHybrid and Multi-Tenant Identity Solutions

Obsidian Systems is designing a hybrid identity and multi-tenant collaboration solution to integrate their on-premises Active Directory Domain Services (AD DS) forest, obsidian.local, with multiple Microsoft Entra ID tenants. The solution must adhere to strict authentication, provisioning, and business continuity requirements. Match each business requirement on the left to the most appropriate Microsoft Entra ID technology or configuration on the right.

  • Evaluate on-premises account status and sign-in hours in real-time for cloud sign-ins without deploying Active Directory Federation Services (AD FS).Pass-through Authentication (PTA)
  • Provide cloud authentication that continues working during on-premises network outages with the least amount of infrastructure overhead.Password Hash Synchronization (PHS)
  • Automate user account provisioning and lifecycle management across multiple distinct internal Microsoft Entra ID tenants.Microsoft Entra Cross-Tenant Synchronization
  • Enable users from an external vendor using a non-Azure identity provider to authenticate using their own credentials without manual guest invitations.SAML/WS-Fed Direct Federation

Answer

1 matches Pass-through Authentication (PTA), 2 matches Password Hash Synchronization (PHS), 3 matches Microsoft Entra Cross-Tenant Synchronization, and 4 matches SAML/WS-Fed Direct Federation.
Pass-through Authentication validates passwords on-premises in real-time to respect sign-in hours without AD FS. Password Hash Sync enables authentication to continue during local internet outages. Cross-Tenant Synchronization automates provisioning across internal Entra ID tenants. SAML/WS-Fed Direct Federation allows external users to authenticate using their non-Azure identity provider.

Step-by-Step Solution

1
Analyze real-time security policy evaluation requirements.
Identify that Pass-through Authentication (PTA) delegates password validation to on-premises AD DS in real-time, enforcing sign-in hours instantly without AD FS infrastructure.
To satisfy the constraint of evaluating sign-in hours in real-time without AD FS.
2
Analyze business continuity and high availability requirements.
Identify that Password Hash Synchronization (PHS) handles authentication in the cloud, remaining active during local network outages with minimal agent overhead.
To satisfy the requirement that cloud authentication must not fail when the connection between the on-premises network and Azure is lost.
3
Analyze multi-tenant provisioning requirements.
Select Microsoft Entra Cross-Tenant Synchronization as it automates user synchronization and lifecycle management between Entra ID tenants.
To satisfy the need for automated provisioning of guest accounts across multiple internal tenants.
4
Analyze external partner authentication requirements.
Select SAML/WS-Fed Direct Federation to delegate authentication to the partner's non-Azure identity provider without manual invitation overhead.
To satisfy the external partner access requirement.

Key Concept

Selecting appropriate Microsoft Entra ID hybrid identity and multi-tenant solutions based on security, availability, and provisioning constraints.
Estimated Time:2m 30s
Rate this question

Topics

Hybrid and Multi-Tenant Identity Solutions

More questions from this topic