Your on-premises network contains SAP and non-SAP applications

HOTSPOT

Your on-premises network contains SAP and non-SAP applications.

You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.

Your external portal uses multi-factor authentication (MFA) to authenticate users.

You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box 1: Yes

Box 2: Yes

Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.

Box 3: Yes

If your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA

enables you to eliminate passwords and provide a more secure way to authenticate.

References:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta