You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.Microsoft Entra Connect has the following settings: Password Hash Sync: EnabledPass-through authentication: EnabledYou need to identify which users will be able to authenticate by using Microsoft Entra ID if connectivity between on-premises Active Directory and the internet is lost.Which users should you identify?
Answer(s): B
Your network contains an on-premises Active Directory domain named contoso.com.For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours. You plan to sync contoso.com to a Microsoft Entra tenant.You need to recommend a solution to ensure that the logon hour restrictions apply when synced users sign in to Microsoft Entra ID.What should you include in the recommendation?
Answer(s): A
https://nickblog.azurewebsites.net/2016/10/17/azure-ad-pass-through-authentication/
Your network contains three Active Directory forests. There are forests trust relationships between the forests. You create a Microsoft Entra tenant.You plan to sync the on-premises Active Directory to Microsoft Entra tenant.You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.What should you include in the recommendation?
Microsoft Entra Connect can be active on only one server. You can install Microsoft Entra Connect on another server for redundancy but the additional installation would need to be in Staging mode. A Microsoft Entra connect installation in Staging mode is configured and ready to go but it needs to be manually switched to Active to perform directory synchronization.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)User2 fails to authenticate to the Microsoft Entra when signing in as user2@fabrikam.com. You need to ensure that User2 can access the resources in Microsoft Entra ID.Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as user2@fabrikam.com.Does this meet the goal?
This is not a permissions issue.The on-premises Active Directory domain is named contoso.com. To enable users to sign on using a differentUPN (different domain), you need to add the domain to Microsoft 365 as a custom domain.
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 subscription that contains the administrative units shown in the following table.The groups contain the members shown in the following table.The users are assigned the roles shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: YesUser2 is Password Administrator for AU1. User1 is a member of Group1.Group1 is a member of AU1.Box 2: NoUser2 is Password Administrator for AU1. User4 is not in AU1 or in a group in AU1.Box 3: YesUser3 is a License Administrator for the organization.
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.