Microsoft Endpoint Administrator — Question 251

Your on-premises network contains an Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.

You need to enable users to connect to Microsoft 365 services from their personal Windows devices by using single sign-on (SSO). The solution must minimize organizational control of the devices.

Which join type should you use?

Answer options

• A. Microsoft Entra registered
• B. Microsoft Entra joined
• C. Active Directory domain-joined
• D. Microsoft Entra hybrid joined

Correct answer: A

Explanation

The correct option is A, Microsoft Entra registered, which allows users to access Microsoft 365 services on their personal devices with minimal control from the organization. Option B, Microsoft Entra joined, is more suitable for corporate-owned devices, while option C, Active Directory domain-joined, requires greater organizational control. Option D, Microsoft Entra hybrid joined, is typically used for devices that need to connect to both on-premises and cloud resources, which does not align with the goal of minimizing control.