Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and configure seamless SSO.

Does this meet the goal?
A . Yes
B . No

View Answer

Answer: A

Explanation:

This solution meets all the requirements:

✑ Users must be able to authenticate during business hours only. (This can be configured by using Logon Hours in Active Directory. Pass-through authentication passes authentication to the on-premise Active Directory)

✑ Authentication requests must be processed successfully if a single server fails. (We have Authentication Agents running on three servers)

✑ When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in. (This can be configured in Active Directory. Pass-through authentication passes authentication to the on-premise Active Directory)

✑ Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically. (This goal is met by seamless SSO)

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn