Microsoft 365 Identity and Services (legacy) — Question 16

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.
You purchase a Microsoft 365 subscription.
You implement password hash synchronization and Azure Active Directory (Azure AD) Seamless Single Sign-On (Seamless SSO).
You need to ensure that users can use Seamless SSO from the Windows 10 computers.
What should you do?

Answer options

• A. Create a conditional access policy in Azure AD.
• B. Deploy an Azure AD Connect staging server.
• C. Join the computers to Azure AD.
• D. Modify the Intranet zone settings by using Group Policy

Correct answer: D

Explanation

To enable Seamless SSO, it is necessary to modify the Intranet zone settings via Group Policy, allowing the Windows 10 computers to authenticate seamlessly. The other options do not directly address the requirement for local Group Policy configuration needed for Seamless SSO functionality.