az-800 Practice Question 1887
Exam: az-800
Domain: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic: Implement and manage hybrid identities
Difficulty: medium
In a hybrid identity deployment, you need to ensure that user passwords from an on-premises Active Directory are synchronized with Microsoft Entra ID. Which tool or service should you use to achieve this synchronization while maintaining password security and minimizing administrative overhead?
Answer Options
A
Azure AD Connect
B
Password Hash Synchronization
C
Azure AD B2C
D
Pass-through Authentication
Correct Answer
B: Password Hash Synchronization
Explanation
Password Hash Synchronization (PHS) is the recommended method for synchronizing passwords between on-premises Active Directory and Microsoft Entra ID. It ensures that passwords are never transmitted in clear text, thereby maintaining security. Azure AD Connect is used for more comprehensive synchronization including attributes and groups, but it requires more administrative overhead compared to PHS. Pass-through authentication is used for authenticating users against on-premises resources without storing credentials in Microsoft Entra ID, and Azure AD B2C is used for managing external identities and applications.