Exam AZ-800 topic 1 question 45 discussion

On-premises Microsoft Entra Password Protection https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-ban-bad-on-premises-deploy

Option A is where we define the banned password lists that the Azure AD Password Protection service uses. we can specify "contoso" as a banned word here, and it will be enforced both in Azure AD and wer on-premises Active Directory, provided we have the Azure AD Password Protection service set up correctly.

The correct answer is: A. the Azure Active Directory admin center You can configure the custom banned password list, which includes preventing the use of the word "contoso" as part of passwords, through the Azure Active Directory admin center. This allows you to enforce password policies centrally for both on-premises AD DS domain and Azure AD users.

M$ Entra admin center -> M$ Entra Password Protection so A.

D. Windows Admin Center

To enforce a password policy that prevents users from including specific words, such as "contoso", you must use Group Policy in Active Directory. The appropriate tool for this would be "Active Directory Users and Computers" (B). Active Directory Users and Computers

valid 27.11.23

Incorrect. Should be A

To prevent users from including the word "contoso" as part of their password in an on-premises Active Directory (AD DS) domain that syncs with Azure AD using Azure AD Connect, you should use Azure AD Password Protection. Therefore, the correct option is: A. the Azure Active Directory admin center

Correct answer is A and not D. You can block what you dont want from Azure AD

The answer is A! I'm using password protection too. I can customize password locked in the azure portal, by going to password protection section

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-operations

Can anyone please illustrate how this answer is correct?