Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to deploy several Microsoft O ce 365 services.
You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:
Users must be able to authenticate during business hours only.
Authentication requests must be processed successfully if a single server fails. When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in. Users who connect to O ce 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.
Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and con gure seamless SSO.
Does this meet the goal?
Answer(s): A
Explanation:
This solution meets all the requirements:
Users must be able to authenticate during business hours only. (This can be con gured by using Logon Hours in Active Directory. Pass- through authentication passes authentication to the on-premise Active Directory) Authentication requests must be processed successfully if a single server fails. (We have Authentication Agents running on three servers) When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in. (This can be con gured in
Active Directory. Pass-through authentication passes authentication to the on-premise Active Directory) Users who connect to O ce 365 services from domain-joined devices that are connected to the internal network must be signed in automatically. (This goal is met by seamless SSO)
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn
Reveal Solution Next Question