Examkin

Soru

Zorluk: KolayHybrid and Multi-Tenant Identity Solutions

Zephyr Global Services has an on-premises Active Directory Domain Services (AD DS) domain. You are designing a hybrid identity solution to sync on-premises user accounts to a single Microsoft Entra ID tenant. The solution must meet the following requirements:
- Users must be able to sign in to cloud services using their on-premises passwords.
- Users must be able to reset their passwords in the cloud, and the new passwords must immediately apply to their on-premises accounts.
- Users must be able to authenticate to cloud services even if the network connection between the on-premises datacenter and Azure is temporarily unavailable.

Which two features should you include in the hybrid identity design? (Select two.)

  1. Password Hash Synchronization (PHS)Cevap
  2. Self-service password reset (SSPR) with password writebackCevap
  3. C
    Pass-through Authentication (PTA)
  4. D
    Active Directory Federation Services (AD FS)

Cevap

To meet the requirements, the hybrid identity design must include Password Hash Synchronization (PHS) and Self-service password reset (SSPR) with password writeback.
Password Hash Synchronization (PHS) is correct because it allows Microsoft Entra ID to perform authentication locally in the cloud, removing any dependency on the on-premises network link during sign-in. Self-service password reset (SSPR) with password writeback is correct because it allows password changes initiated in Microsoft Entra ID to be securely written back to the on-premises AD DS database immediately.

Adım Adım Çözüm

1
Analyze the authentication and business continuity requirements.
Since users must authenticate to cloud services even during a network outage between the on-premises datacenter and Azure, cloud-based authentication is required. Password Hash Synchronization (PHS) copies password hashes to Microsoft Entra ID, allowing authentication to occur completely in the cloud without requiring connectivity to the on-premises domain controllers.
Ensures authentication continues to function during a network outage, unlike Pass-through Authentication (PTA) or Active Directory Federation Services (AD FS) which rely on active on-premises connectivity.
2
Analyze the password management and self-service requirements.
To allow users to change passwords in Microsoft Entra ID and sync them back to the on-premises Active Directory Domain Services (AD DS) immediately, Self-service password reset (SSPR) with password writeback must be enabled.
Enables two-way password synchronization from cloud to on-premises.

Anahtar Kavram

Designing hybrid identity sync methods and password writeback capabilities to meet high availability and self-service requirements.
Bu soruyu puanla

Konular

Hybrid and Multi-Tenant Identity Solutions

Bu konudan daha fazla soru