Supported Entra-joined Windows devices use Windows Hello for Business and need SSO to on-premises AD resources. Which architecture should be evaluated?

Choose the single best answer.

A.Use Entra Domain Services as a mandatory replacement for all existing on-premises domain controllers.
B.Evaluate cloud Kerberos trust and its connectivity and device/domain prerequisites.
C.Use application proxy as the general network path for every AD file-share protocol.
D.Assume an Entra token eliminates all domain-controller and service-ticket requirements for existing AD resources.

Show the answer and explanation

✓ Correct answer

Evaluate cloud Kerberos trust and its connectivity and device/domain prerequisites.

Cloud Kerberos trust fits the supported passwordless-client SSO scenario while on-premises domain controllers still issue service tickets and control authorization. Connectivity remains necessary. Application proxy is supported web publishing, and Entra Domain Services is a different managed legacy-domain scenario rather than a mandatory replacement. Source: AZ-305 Study Guide.pdf, PDF page(s) 16.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.