Examkin

Question

Difficulty: MediumHybrid and Multi-Tenant Identity Solutions

You are designing a hybrid and multi-tenant identity solution for an organization that has an on-premises Active Directory Domain Services (AD DS) forest and a Microsoft Entra ID tenant. Match each technical requirement on the left to the correct identity technology or configuration on the right. Each technology or configuration may be used once, more than once, or not at all.

  • Validate hybrid user passwords in the cloud while enabling the detection of compromised credentials on the public internet.Password Hash Synchronization (PHS)
  • Validate hybrid user passwords by routing requests directly to on-premises domain controllers via lightweight agents.Pass-through Authentication (PTA)
  • Enable users from an external partner organization to collaborate inside a Microsoft Teams shared channel without creating guest accounts in your tenant.Microsoft Entra B2B Direct Connect
  • Allow guest users in your tenant to satisfy Multi-Factor Authentication (MFA) requirements using their home tenant's MFA verification.Cross-tenant access settings trust settings

Answer

Validate hybrid user passwords in the cloud matches Password Hash Synchronization (PHS). Validate hybrid user passwords via lightweight agents matches Pass-through Authentication (PTA). Collaborate in a Microsoft Teams shared channel without creating guest accounts matches Microsoft Entra B2B Direct Connect. Allow guest users to satisfy MFA using their home tenant's verification matches Cross-tenant access settings trust settings.
Password Hash Synchronization (PHS) is the correct choice for validating hybrid user passwords in the cloud and enabling leaked credential detection. Pass-through Authentication (PTA) is correct for validating credentials against on-premises Active Directory domain controllers using lightweight agents. Microsoft Entra B2B Direct Connect is correct for enabling external users to collaborate in Teams shared channels without creating guest accounts. Cross-tenant access settings trust settings is correct for allowing guest users to bypass local MFA prompts by trusting their home tenant's MFA validation.

Step-by-Step Solution

1
Analyze the requirement to validate hybrid passwords in the cloud while enabling leaked credential detection.
Determine that Password Hash Synchronization (PHS) is required because it is the only sync method that replicates password hashes to Microsoft Entra ID, which is necessary for Entra ID Protection to run leaked credential checks.
PHS copies password hashes to Microsoft Entra ID, facilitating both authentication in the cloud and security analysis for leaked credentials.
2
Analyze the requirement to validate passwords directly against on-premises domain controllers using agents.
Determine that Pass-through Authentication (PTA) is required.
PTA validates credentials on-premises using local agents, ensuring that password validation occurs on-premises without replicating password hashes if desired, while avoiding full AD FS deployments.
3
Analyze the requirement to enable external collaboration inside Microsoft Teams shared channels without guest accounts.
Determine that Microsoft Entra B2B Direct Connect is required.
B2B Direct Connect establishes a direct link between organizations, enabling seamless access to shared channels without guest account clutter.
4
Analyze the requirement to trust the home tenant's MFA verification for guest users.
Identify cross-tenant access settings trust settings.
Trusting MFA settings within the cross-tenant access configuration allows external organizations' MFA validations to satisfy local host tenant conditions.

Key Concept

Selecting the correct hybrid synchronization methods and cross-tenant collaboration mechanisms based on organizational requirements.
Estimated Time:2m 0s
Rate this question

Topics

Hybrid and Multi-Tenant Identity Solutions

More questions from this topic