Examkin

Soru

Zorluk: Çok zorHybrid and Multi-Tenant Identity Solutions

Your organization, Tailwind Traders, is designing a hybrid and multi-tenant identity solution to integrate several business units and external partners with Microsoft Entra ID. You need to match the specific business requirement on the left to the correct Microsoft Entra identity technology or configuration on the right to achieve a secure, resilient, and highly automated architecture.

  • Ensure that users from an external partner tenant can access resources in your tenant without local credential management, while accepting the MFA claims and device compliance status verified by their home tenant.Cross-tenant access settings with inbound trust settings enabled for MFA and compliant devices
  • Allow on-premises AD DS users to authenticate to Entra ID using their on-premises credentials validated in real-time against domain controllers, while maintaining authentication capability if the on-premises connection is lost.Microsoft Entra Connect Pass-through Authentication (PTA) with Password Hash Synchronization (PHS) configured as a backup
  • Automate the lifecycle of user accounts created for collaboration between two distinct Entra ID tenants within the same organization, including provisioning and deprovisioning based on changes in the source tenant.Microsoft Entra Cross-tenant synchronization using the Azure AD provisioning service
  • Allow external contractors who do not possess a Microsoft account, Entra ID tenant, or federated identity provider to securely authenticate to shared applications using their business email addresses.Microsoft Entra ID External Identities with Email One-Time Passcode (OTP) authentication

Cevap

Match the external partner trust requirement to cross-tenant access settings with inbound trust; match real-time authentication with offline failover to Pass-through Authentication (PTA) with Password Hash Sync (PHS) backup; match automated multi-tenant user lifecycle to Cross-tenant synchronization; and match contractors without tenants to Email One-Time Passcode (OTP).
The correct matches represent optimal architectural alignments for Azure identity scenarios: Cross-tenant access settings inbound trust configuration allows trusting external MFA/compliance; PTA with PHS backup offers on-premises real-time validation with cloud failover; Cross-tenant synchronization automates multi-tenant account lifecycles; and Email OTP supports users without structured identity providers.

Adım Adım Çözüm

1
Analyze the requirement for trusting MFA and compliant devices from an external partner tenant.
Identify that Cross-tenant access settings allow you to trust MFA and device compliance from external Entra ID tenants, preventing double-prompting of external users.
This reduces friction for external users while maintaining security postures verified by their home tenants.
2
Analyze the real-time authentication requirement with an offline failover mechanism.
Determine that Pass-through Authentication (PTA) meets the real-time on-premises validation requirement, and enabling Password Hash Synchronization (PHS) provides a seamless fallback when PTA agents are unreachable.
Entra ID will automatically switch to PHS validation if the PTA agents are offline, ensuring business continuity.
3
Analyze the automated lifecycle management requirement for B2B collaboration across distinct Entra ID tenants.
Identify that Cross-tenant synchronization uses the Microsoft Entra provisioning service to automate provisioning, updating, and deprovisioning of B2B users across tenants.
This reduces administrative overhead and ensures external guest accounts are removed when users leave the source tenant.
4
Analyze the requirement to authenticate external contractors without an Entra ID or federated identity.
Recognize that Email One-Time Passcode (OTP) allows external users to authenticate using a temporary code sent to their email, serving as a fallback when no federated identity provider exists.
This ensures secure access for partners without requiring them to create a Microsoft Account.

Anahtar Kavram

Designing secure, resilient, and automated hybrid and multi-tenant identity topologies in Microsoft Entra ID.
Bu soruyu puanla

Konular

Hybrid and Multi-Tenant Identity Solutions

Bu konudan daha fazla soru