Exam MS-102 topic 1 question 166 discussion

Box 1: Cannot change her password from any Microsoft Portal: Password writeback is disabled, if the user changes the password in cloud services, the new password will be overridden in the next Azure AD connect sync process with the password in Active directory. Box 2: the new password hash will be synchronized to Azure AD if the user updates the password in AD, the new hash will be synced to AAD in the next ADSYNC.

Answer is correct. 1. No mention of SSPR or whether the user is able to access admin center. 2. Hash from on-prem will sync to Azure AD https://oxfordcomputertraining.com/glossary/what-is-password-hash-synchronization/

Given answers are correct. 1. Cannot change password from MS because password writeback is disabled. 2. PHS is enabled so hash of password will be synced to EID.

Given answer is correct. Password writeback is Disabled, so changing your password from the cloud will NOT be synced back to the local AD server.

Answer is wrong To configure the usage location for users in Azure, you need to have the appropriate permissions. The following roles can configure the usage location for users in Azure: Groups Administrator: This role can specify the usage location property on a user 12. Global Administrator: This role has access to all administrative features in Azure AD and can manage all aspects of users, groups, and domains 3. To view BitLocker recovery keys in Azure AD, you need to have the appropriate permissions. The following roles can view BitLocker recovery keys in Azure: Cloud Device Administrator Helpdesk Administrator Security Administrator Global Administrator