AB-650 Practice Question 3129
Exam: AB-650
Domain: Govern and secure Microsoft 365 tenants and workloads
Difficulty: medium
You are deploying Microsoft Entra Connect. You want to enable dark-web leaked credential detection in Microsoft Entra Identity Protection while keeping directory infrastructure simple. Which synchronization method should you select?
Answer Options
A
Password Hash Synchronization (PHS)
B
Active Directory Federation Services (AD FS) with federation farm
C
Pass-through Authentication without PHS backup
D
LDAP relay over unencrypted port 389
Correct Answer
A: Password Hash Synchronization (PHS)
Explanation
Password Hash Synchronization (PHS) syncs password hashes to Microsoft Entra ID, enabling Identity Protection to match user hashes against known breached credentials.