A company has AD DS and assumes it must deploy AD FS for Microsoft Entra sign-in. Native cloud authentication already satisfies its requirements. What should the architect recommend?

Choose the single best answer.

A.Assume directory synchronization alone forces all credential validation through AD FS.
B.Require federation for every SAML application without evaluating Entra's supported application integration.
C.Deploy AD FS solely because an AD DS forest already exists.
D.Prefer cloud authentication when it meets the requirements.

Show the answer and explanation

✓ Correct answer

Prefer cloud authentication when it meets the requirements.

An existing AD DS forest does not require federation. Cloud authentication can reduce validation-path infrastructure when native capabilities meet the requirement. Application protocol support must be assessed rather than assuming every SAML app requires AD FS, and synchronization does not force federation. Source: AZ-305 Study Guide.pdf, PDF page(s) 14.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.