ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam
Go to Exam

Exam MS-100 topic 4 question 9 discussion

Actual exam question from Microsoft's MS-100
Question #: 9
Topic #: 4
[All MS-100 Questions]

Your network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers.
Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You plan to install Azure AD connect on a member server and implement pass-through authentication.
You need to prepare the environment for the planned implementation of pass-through authentication.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Modify the email address attribute for each user account.
  • B. From the Azure portal, add a custom domain name.
  • C. From Active Directory Domains and Trusts, add a UPN suffix.
  • D. Modify the User logon name for each user account.
  • E. From the Azure portal, configure an authentication method.
  • F. From a domain controller, install an Authentication Agent.
Show Suggested Answer Hide Answer
Suggested Answer: BCD 🗳️
by MSFrankWu at May 13, 2021, 10:41 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Kipperson
Highly Voted 3 years, 11 months ago
BCD I would think. the Pass through agent should never be installed on a domain controller as best practice and C because the suffix needs to be updated?
upvoted 20 times
...
MSFrankWu
Highly Voted 3 years, 11 months ago
Should this be BCD as the user's UPN suffix need to be update to contoso.com?
upvoted 13 times
...
mendel79
Most Recent 1 month ago
Selected Answer: ABC
A= the email attribute contoso.local is npt going to work B = you need to add a custom domain C = you must add anew UPN Suffix
upvoted 1 times
...
Amir1909
1 year, 2 months ago
B, C and D
upvoted 1 times
...
aims123456
2 years ago
BCF is correct.. after a lot of searching and reading... F mentioned "FROM a DC", it doesn't say "ON a DC".. Microsoft is amazing and it's often an English exam compared to a technical exam.. So from a DC, you can install Auth Agent on other servers (like Core servers) using PS comands. refer: Step 4 in https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-quick-start Why D isn't a good choice, because it's not a pre-requisite to modify UPNs as that can be taken care during sync or config of AD Connect.
upvoted 2 times
...
DeLoc
2 years, 2 months ago
I am not sure I am convinced. While updating UPN is a prereq, that is not what D says. Whereas an Authentication Agent is required and is technically supported on a DC just not reccomended. Yet another poor question.
upvoted 2 times
...
joergsi
3 years, 2 months ago
Selected Answer: BCD
I would go with the answer provided by Storm!
upvoted 2 times
...
LillyLiver
3 years, 2 months ago
Selected Answer: BCD
An auth agent on a DC? No, thank you.
upvoted 2 times
...
ExamTraining24
3 years, 3 months ago
Selected Answer: BCD
As explained by others.. PTA agent should not be installed on Domain controllers.
upvoted 3 times
...
Wojer
3 years, 3 months ago
there is nothing about contoso.com so in my opinion, it should be CDF
upvoted 1 times
...
Storm
3 years, 3 months ago
BCD Allthough one could argue that it should be CDF... B - Because Microsoft never want's us to use onmicrosoft.com C - Because We need to have a routable domain-name D - Because All synced users need the routeable domain name as UPN NOT F - Because 1. Authentication Agents should not be installed on a domain controller 2. Authentication Agents is installed after AD Connect is installed and configured, we are only asked to prepare...
upvoted 7 times
...
tcmaggio
3 years, 4 months ago
Selected Answer: BCD
BCD imho... Question states: prepare! And also, theres no point in installing PTA Agent prior to getting users fully prepared to be synched, and that includes configure them with new upn suffix
upvoted 3 times
...
Jcbrow27
3 years, 5 months ago
Selected Answer: BCD
are the correct
upvoted 3 times
...
thomasimmer
3 years, 5 months ago
Selected Answer: CDF
Contoso.local can not be added
upvoted 2 times
...
fko1978
3 years, 7 months ago
C,D,F. you can try to add contoso.local, but it wouldn't work
upvoted 3 times
...
Test63126536256316
3 years, 8 months ago
bcd i think
upvoted 2 times
...
nicoidinfo
3 years, 8 months ago
BCD should be better. Auth agent will be installed with AD Connect. UPN of the users must be changed before install AD Connect
upvoted 2 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago