Microsoft 365 Administrator — Question 343

Your on-premises network contains an Active Directory domain.

You have a Microsoft 365 E5 subscription.

You plan to implement a hybrid configuration that has the following requirements:

• Minimizes the number of times users are prompted for credentials when they access Microsoft 365 resources
• Supports the use of Azure AD Identity Protection

You need to configure Azure AD Connect to support the planned implementation.

Which two options should you select? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Answer options

• A. Password Hash Synchronization
• B. Password writeback
• C. Directory extension attribute sync
• D. Enable single sign-on
• E. Pass-through authentication

Correct answer: A, D

Explanation

The correct answers are A and D. Password Hash Synchronization allows for a seamless experience by syncing user passwords to Azure AD, thereby reducing credential prompts. Enabling single sign-on further minimizes user prompts by allowing them to authenticate once and access both on-premises and Microsoft 365 resources without re-entering credentials. The other options do not specifically address the requirements of minimizing prompts and supporting Azure AD Identity Protection.