az-800 Practice Question 928

Exam: az-800
Domain: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic: Implement and manage hybrid identities
Difficulty: medium
Which authentication method in Microsoft Entra Connect provides the highest level of on-premises security validation by evaluating on-premises AD policies (like account expiration and logon hours) in real-time during sign-in?

Answer Options

A
Password Hash Synchronization (PHS)
B
Active Directory Federation Services (AD FS)
C
Seamless Single Sign-On (SSO)
D
Pass-through Authentication (PTA)

Correct Answer

D: Pass-through Authentication (PTA)

Explanation

Pass-through Authentication (PTA) directly validates users' passwords against the on-premises Active Directory in real-time, allowing on-premises policies to apply instantly.