Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Password Hash Synchronization ✅ Required for Azure AD Identity Protection because it needs password hashes in the cloud to evaluate risk and enforce policies. B. Password writeback ❌ Useful for self-service password reset, but not required for the stated requirements. C. Directory extension attribute sync ❌ Not relevant to minimizing sign-ins or Identity Protection. D. Enable single sign-on (SSO) ✅ Reduces the number of times users are prompted for credentials by allowing seamless sign-in. E. Pass-through authentication ❌ While it allows authentication against on-prem AD, it does not support Azure AD Identity Protection fully (risk-based policies require password hash sync).
I would say D & B. D - Enable SSO via AAD Connect to minimize number of time users are prompted for creds, works with both PHS & PTA B - Enable Password Writeback to allow synchronized onprem users to do SSPR when their User Risk Score set by Identity Protection is High I think MS or vendor is wrong here, no reason for PHS to be correct answer
AD - correct