An organization requires cloud sign-in to validate current AD account policies through on-premises infrastructure and can operate resilient agents and domain controllers. Which authentication method is the best fit?

Choose the single best answer.

A.Use pass-through authentication.
B.Use PHS and rely on synchronization rather than on-premises validation for every sign-in.
C.Use a cloud-only identity with no link to the organization's AD account policies.
D.Select Cloud Sync alone and treat directory provisioning as the credential-validation method.

Show the answer and explanation

✓ Correct answer

Use pass-through authentication.

PTA validates passwords through outbound-connected agents against AD DS. PHS validates cloud information, and a cloud-only identity does not directly validate the specified AD policies. Cloud Sync handles provisioning rather than being the password-validation selection itself. Source: AZ-305 Study Guide.pdf, PDF page(s) 13-14.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.