Microsoft Certified: Identity and Access Administrator Associate Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  same as question before

• Chose B3

  B. No is correct answer

• 1

  o ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD, you can configure Pass-through Authentication (PTA). PTA validates user credentials against your on-premises Active Directory environment without the need for complex network infrastructure or for managing a separate set of credentials in the cloud. You can find more information on how to configure PTA in the Microsoft documentation 1. Alternatively, you can configure Azure AD provisioning to deprovision or deactivate disabled users in applications. For applications that don’t use Azure AD SaaS App Provisioning, you can use Identity Manager (MIM) or a 3rd party solution to automate the deprovisioning of users. You should also identify and develop a process for applications that require manual deprovisioning