Correct Answer: Azure AD Application Proxy
Azure AD Application Proxy provides secure remote access to on-premises web applications. It uses an outbound-only agent installed on-premises, meaning you do not need to open inbo...
Correct Answer
Azure AD Application Proxy
Why This Answer Is Correct
Azure AD Application Proxy provides secure remote access to on-premises web applications. It uses an outbound-only agent installed on-premises, meaning you do not need to open inbound ports on your corporate firewall.
This question evaluates your knowledge of Hybrid Identity — a core concept tested in Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801). Understanding Hybrid Identity is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your company has an on-premises Active Directory Domain Services (AD DS) environment. You want to sync users to Azure AD (Entra ID) using Azure AD Connect. Security policies dictate that user passwords must never be synchronized to the cloud, even in hashed form, but users must still be able to sign in to Microsoft 365 using their on-premises passwords. Which authentication method should you configure?
You are deploying Azure AD Connect with Password Hash Synchronization (PHS). You want to ensure that corporate users automatically sign in to Azure AD-connected applications without typing their passwords when they are on their corporate Windows 10 devices connected to the internal network. What feature must you enable?