Scenario Note: Each question in this series shares a common scenario but may contain different solutions to achieve the stated objectives. Some solutions may be correct while others may not. These questions are designed to be answered independently and cannot be revisited once answered.
Your network infrastructure includes an Active Directory forest, and you have deployed Microsoft 365 services. You intend to set up directory synchronization.
Your task is to suggest a security approach for synchronized identities that adheres to these requirements:
Users must be able to authenticate successfully to Microsoft 365 services even if Active Directory becomes unavailable.
Users' passwords must be a minimum of 10 characters.
Proposed Solution: Implement password hash synchronization and configure password protection in the Azure AD tenant.
Does this solution meet the stated requirements?
Select an option, then click Submit answer.
Reference / correct answer:
This solution meets the requirement that users are able to authenticate to Microsoft 365 services even if the on-premises Active Directory is unavailable by enabling authentication through Azure Active Directory. However, the solution does not satisfy the requirement for enforcing a minimum password length of 10 characters directly through Azure AD. This is typically configured in the on-premises Active Directory Default Domain Policy. Azure Password Protection focuses on forbidden password lists rather than enforcing password length.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization