Microsoft 365 Administrator — Question 51

Your network contains an on-premises Active Directory domain named contoso.com.
For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours.
You plan to sync contoso.com to an Azure AD tenant
You need to recommend a solution to ensure that the logon hour restrictions apply when synced users sign in to Azure AD.
What should you include in the recommendation?

Answer options

• A. pass-through authentication
• B. conditional access policies
• C. password synchronization
• D. Azure AD Identity Protection policies

Correct answer: A

Explanation

The correct answer is A, pass-through authentication, as it allows users to authenticate against the on-premises Active Directory and thus enforce the existing logon hour restrictions. The other options, such as B and D, do not directly apply the on-premises Logon Hour settings, while C only synchronizes passwords and does not handle logon restrictions.