MS-102 Question 238

Question

Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription. You implement a directory synchronization solution that uses pass-through authentication. You configure Azure AD smart lockout as shown in the following exhibit. You discover that Active Directory users can use the passwords in the custom banned passwords list. You need to ensure that banned passwords are banned for all users. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. From a domain controller, install the Azure AD Password Protection Proxy.
B. From Active Directory, modify the Default Domain Policy.
C. From a domain controller, install the Azure AD Application Proxy connector.
D. From all the domain controllers, install the Azure AD Password Protection DC Agent.
E. From Password protection for Windows Server Active Directory, modify the Mode setting.
F. From Custom banned passwords, modify the Enforce custom list setting.

Accepted Answer

Marked answer: A. From a domain controller, install the Azure AD Password Protection Proxy.

MS-102 Question 238

Community Discussion

Preparing Practice Exam…

MS-102 Question 238

Community Discussion