AZ-301 Exam QuestionsBrowse all questions from this exam

AZ-301 Exam - Question 50


Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.

Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.

You need to enable single sign-on (SSO) for company users.

Solution: Install and configure an Azure AD Connect server to use pass-through authentication and select the Enable single sign-on option.

Does the solution meet the goal?

Show Answer
Correct Answer: A

The solution provided involves installing and configuring an Azure AD Connect server to use pass-through authentication and selecting the Enable single sign-on option. This setup does indeed meet the goal of enabling single sign-on (SSO) for company users, allowing them to be automatically signed in to cloud apps when they are on their corporate desktops connected to the corporate network. Azure AD Connect supports pass-through authentication and can enable seamless SSO, which automatically signs in users when they are on the corporate network without requiring additional configurations such as trusted IP ranges.

Discussion

5 comments
Sign in to comment
[Removed]
Jan 13, 2020

Does this solve just the one goal? If they want users to be automatically signed in when they are on-prem, don't we need trusted IP ranges as well?

Gineoh
Jan 15, 2020

Yes should be correct. Researched a little bit: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso --> "It can be enabled via Azure AD Connect."

xofowi5140
Apr 14, 2020

Seamless SSO can be combined with either the Password Hash Synchronization or Pass-through Authentication sign-in methods. Seamless SSO is not applicable to Active Directory Federation Services (ADFS).

tartar
Sep 18, 2020

A is ok

us3r
Jan 30, 2022

ok is A

us3r
Jan 30, 2022

ok is A

tartar
Sep 18, 2020

A is ok

us3r
Jan 30, 2022

ok is A

us3r
Jan 30, 2022

ok is A

xofowi5140
Apr 14, 2020

Seamless SSO can be combined with either the Password Hash Synchronization or Pass-through Authentication sign-in methods. Seamless SSO is not applicable to Active Directory Federation Services (ADFS).

tartar
Sep 18, 2020

A is ok

us3r
Jan 30, 2022

ok is A

us3r
Jan 30, 2022

ok is A

tartar
Sep 18, 2020

A is ok

us3r
Jan 30, 2022

ok is A

us3r
Jan 30, 2022

ok is A

sanketshah
Jan 1, 2021

A is correct

mstm
Sep 4, 2020

Answer is: NO. Provided solution is incomplete, https://autologon.microsoftazuread-sso.com has to added to the Intranet zone settings. Ref.: https://docs.microsoft.com/pl-pl/azure/active-directory/hybrid/how-to-connect-sso-quick-start

glam
Feb 1, 2021

A. Yes

anameen
Jun 12, 2020

is it enough? what about Pass-through Authentication Agent installation and config ?