Which Azure AD feature can enable users to access Azure resources?

An Azure organization wants to enforce its on-premises AD security and password policies to filter brute-force attacks. Instead of using legacy authentication, the users should sign in to on-premises and cloud-based applications using the same passwords in Azure AD.

Which Azure AD feature can enable users to access Azure resources?
A . Azure Automation
B . Azure AD Connect
C . Azure AD Pass Through Authentication
D . Azure Policy

View Answer

Answer: C

Explanation:

Azure AD Pass-Through Authentication (PTA) allows users to sign in to both on-premises and cloud-based applications using the same passwords. This feature is part of Azure Active Directory (AD) and helps organizations enforce their on-premises AD security and password policies in the cloud, thereby providing a seamless user experience while maintaining security.

Here’s how Azure AD PTA works:

Integration with On-Premises AD: Azure AD PTA integrates with an organization’s on-premises AD to apply the same security and password policies to cloud resources.

Authentication Request Handling: When a user signs in, the authentication request is passed through to the on-premises AD for validation.

Brute-Force Attack Protection: By enforcing the on-premises AD security policies, Azure AD PTA helps to filter out brute-force attacks.

No Passwords Stored in the Cloud: User passwords remain on-premises and are not stored in Azure AD, which enhances security.

Simple Sign-On Experience: Users enjoy a simple sign-on experience with the same set of credentials

across on-premises and cloud services.

Reference: Microsoft’s documentation on deploying on-premises Microsoft Entra Password Protection, which works with Azure AD PTA1.

A step-by-step guide on implementing Azure AD Password Protection on-premises, which complements the PTA feature2.

An overview of Azure AD Password Protection and Smart Lockout features, which are part of the broader Azure AD security framework3.