Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. pass-through authentication
In this Scenario, the best option will be PHS
Answer D If you have Password Hash Synchronization (PHS), the password policies in AD DS and Entra ID are different and not synchronized. With PHS and Password Writeback, users can use Self-Service Password Reset (SSPR) in Azure AD (license requirement). The only way to have a unique password policy and, in this case, meet the "On-premises Active Directory password complexity" requirement is with Pass-through Authentication (PTA). Password writeback is supported in environments that use the following hybrid identity models: Password hash synchronization, Pass-through authentication and Active Directory Federation Services With PTA, you must have the AD DS in high availability, otherwise you will not be able to sign-in if AD DS becomes unavailable.