Microsoft Identity and Access Administrator — Question 76

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs user accounts with a Microsoft 365 E5 subscription.

You need to ensure that on-premises account lockout policies are applied to Microsoft Entra sign-ins.

What should you configure?

Answer options

• A. Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO)
• B. Microsoft Entra Cloud Sync
• C. password hash synchronization
• D. pass-through authentication

Correct answer: D

Explanation

The correct answer is D, as pass-through authentication allows for on-premises account policies, including lockout policies, to be enforced during sign-ins. Options A and B do not address the need for enforcing on-premises policies, while option C only synchronizes password hashes without enforcing lockout settings.