You need to recommend an identity solution that meets the technical requirements.
What should you recommend?

A. password hash synchronization and single sign-on (SSO)

B. federated single sign-on (SSO) and Active Directory Federation Services (AD FS)

C. Pass-thorough Authentication and single sign-on (SSO)

D. cloud-only user accounts








 

Suggested Answer: C

With Pass-through Authentication the on-premises passwords are never stored in the cloud in any form.
Scenario:
✑ Prevent user passwords or hashes of passwords from being stored in Azure.
✑ Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
✑ Minimize administrative effort whenever possible.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

This question is in AZ-303 Microsoft Azure Architect Technologies Exam
For getting Microsoft Certified: Azure Solutions Architect Expert Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.