Microsoft 365 Administrator — Question 84

Your on-premises network contains an Active Directory domain.
You have a Microsoft 365 subscription.
You need to sync the domain with the subscription. The solution must meet the following requirements:
On-premises Active Directory password complexity policies must be enforced.
Users must be able to use self-service password reset (SSPR) in Azure AD.
What should you use?

Answer options

• A. password hash synchronization
• B. Azure AD Identity Protection
• C. Azure AD Seamless Single Sign-On (Azure AD Seamless SSO)
• D. pass-through authentication

Correct answer: D

Explanation

The correct answer is D, pass-through authentication, as it allows users to authenticate directly against the on-premises Active Directory while enforcing password policies and supporting self-service password reset in Azure AD. Option A, password hash synchronization, does not enforce on-premises password policies. Options B and C are unrelated to the synchronization and password requirements stated in the question.