Examkin

Soru

Zorluk: KolayHybrid and Multi-Tenant Identity Solutions

You are designing an identity solution for an organization. Match each business and technical requirement to the most appropriate Microsoft Entra ID hybrid or multi-tenant identity technology.

  • Authenticate users on-premises using a local agent, ensuring that no password hashes are stored in the cloud.Pass-Through Authentication (PTA)
  • Synchronize user accounts and their password hashes to the cloud to enable cloud-based authentication and offline resilience.Password Hash Synchronization (PHS)
  • Enable external business partners to access corporate applications using their own corporate credentials.Microsoft Entra B2B collaboration
  • Automatically provision and manage user accounts across multiple Microsoft Entra ID tenants within the same organization.Cross-tenant synchronization

Cevap

The requirement for on-premises validation without cloud password hashes matches Pass-Through Authentication (PTA). The requirement for cloud-based authentication with offline resilience matches Password Hash Synchronization (PHS). The requirement for external partner access matches Microsoft Entra B2B collaboration. The requirement for automated multi-tenant user provisioning matches Cross-tenant synchronization.
The correct pairings align each scenario with its primary technical match: Pass-Through Authentication (PTA) validates credentials locally without storing hashes; Password Hash Synchronization (PHS) copies password hashes to Microsoft Entra ID to support offline cloud authentication; Microsoft Entra B2B collaboration allows external business partners to log in using their own credentials; and Cross-tenant synchronization automates user provisioning and lifecycle management across different Entra ID tenants in the same organization.

Adım Adım Çözüm

1
Analyze the on-premises security policy requirement: no cloud password hashes and authentication via local agents.
Identify Pass-Through Authentication (PTA) as the solution because it forwards password validation requests to local agents.
PTA satisfies the constraint of not storing hashes in the cloud while retaining local control.
2
Analyze the business continuity requirement: authenticate in the cloud during on-premises outages.
Identify Password Hash Synchronization (PHS) as the solution because it stores password hashes in Microsoft Entra ID, enabling independent cloud authentication.
PHS allows authentication to succeed even if the on-premises domain controllers or agents are offline.
3
Analyze the external sharing requirement: allow business partners to log in with their own identities.
Identify Microsoft Entra B2B collaboration as the feature designed for external user access.
B2B collaboration enables guest users to use their corporate or social identities.
4
Analyze the multi-tenant automation requirement: automate provisioning across tenants inside the same organization.
Identify Cross-tenant synchronization as the direct service for synchronizing users across tenants.
Cross-tenant synchronization automates lifecycle management of B2B users across organization-owned tenants.

Anahtar Kavram

Azure Hybrid and Multi-Tenant Identity Integration Options
Bu soruyu puanla

Konular

Hybrid and Multi-Tenant Identity Solutions

Bu konudan daha fazla soru