Microsoft 365 Administrator — Question 127

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.

You purchase a Microsoft 365 subscription.

You implement password hash synchronization and Azure AD Seamless Single Sign-On (Seamless SSO).

You need to ensure that users can use Seamless SSO from the Windows 10 computers.

What should you do?

Answer options

• A. Join the computers to Azure AD.
• B. Create a conditional access policy in Azure AD.
• C. Modify the Intranet zone settings by using Group Policy.
• D. Deploy an Azure AD Connect staging server.

Correct answer: C

Explanation

The correct answer is C, as modifying the Intranet zone settings through Group Policy is necessary for Seamless SSO to work correctly with the local network environment. Options A and D are not relevant to enabling Seamless SSO directly, and B, while related to security, does not configure the necessary settings for Seamless SSO functionality.