Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory forest. You deploy Microsoft 365.You plan to implement directory synchronization.You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.User passwords must be 10 characters or more.Solution: Implement pass-through authentication and configure Microsoft Entra Password protection. Does this meet the goal?
Answer(s): B
This solution does not meet the following requirement:Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.This is because with pass-through authentication, the authentication is performed by the on-premise Active Directory.This solution does not meet the following requirement: User passwords must be 10 characters or more.To meet this requirement, you would need to configure the Default Domain Policy in the on-premise Active Directory.Azure Password Protection can prevent users from using passwords from a ‘banned password’ list but itcannot be configured to require that passwords must be 10 characters or more.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory forest. You deploy Microsoft 365.You plan to implement directory synchronization.You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.User passwords must be 10 characters or more.Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory.Does this meet the goal?
Answer(s): A
This solution meets the requirements:Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. (this is because the authentication is performed by Microsoft Entra ID).User passwords must be 10 characters or more. (the Default Domain Policy in the on-premise Active Directory can be configured to require the password length).
HOTSPOT (Drag and Drop is not supported)You have a hybrid deployment of Microsoft Entra that contains the users shown in the following table.You need to identify which users can perform the following tasks:View sync errors in Microsoft Entra Connect Health. Configure Microsoft Entra Connect Health settings.Which user should you identify for each task? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-diagnose-sync-errors https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-operations https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
Your company has three main offices and one branch office. The branch office is used for research. The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.What should you include in the recommendation?
Answer(s): D
With Microsoft Entra Conditional Access, you can control how authorized users can access your cloud apps. The location condition of a Conditional Access policy enables you to tie access controls settings to the network locations of your users.For this question, we need to configure a location condition in a conditional access policy and apply the policy to users in that location (the branch office). The conditional access policy can be required to ‘Allow Access’ but ‘Required MFA’.
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might havemore than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory domain. You deploy a Microsoft Entra tenant.Another administrator configures the domain to synchronize to Microsoft Entra tenant.You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Microsoft Entra tenant. All the other user accounts synchronized successfully.You review Microsoft Entra Connect Health and discover that all the user account synchronizations completed successfully.You need to ensure that the 10 user accounts are synchronized to Microsoft Entra tenant. Solution: From Microsoft Entra Connect, you modify the filtering settings.Does this meet the goal?
The question states that “all the user account synchronizations completed successfully”. Therefore, the Microsoft Entra credentials are configured correctly in Microsoft Entra Connect. It is likely that the 10 user accounts are being excluded from the synchronization cycle by a filtering rule.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.