An organization wants existing synchronized employees to sign in to cloud applications even if the on-premises site is offline. It accepts synchronization delay for account changes. Which authentication approach best fits?

Choose the single best answer.

A.Use password hash synchronization for cloud validation.
B.Use federation with the only AD FS validation service at the on-premises site.
C.Use PTA with every agent and domain controller at the on-premises site as the only validation path.
D.Use Cloud Sync without selecting a cloud authentication method or preparing an outage procedure.

Show the answer and explanation

✓ Correct answer

Use password hash synchronization for cloud validation.

PHS validates synchronized derived hashes in the cloud without a per-sign-in local request. The proposed PTA and AD FS designs still depend on the unavailable site. Cloud Sync provisions directory information; selecting its synchronization architecture alone does not establish an outage-resilient authentication method. Source: AZ-305 Study Guide.pdf, PDF page(s) 13-14.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.