Microsoft Azure Architect Design (AZ-304) Practice Test

What is one effective solution for enabling single sign-on (SSO) in Azure for corporate users using Azure AD?

1. Implement an Azure AD Connect server with password hash synchronization

2. Install an on-premises AD DS server in an Azure VM

3. Enable multi-factor authentication for all company users

4. Configure Azure Active Directory Privileged Identity Management

The correct answer is: Implement an Azure AD Connect server with password hash synchronization

Implementing an Azure AD Connect server with password hash synchronization is an effective solution for enabling single sign-on (SSO) in Azure for corporate users using Azure Active Directory (Azure AD). This approach allows seamless integration between on-premises Active Directory and Azure AD, facilitating a unified sign-on experience for users. When password hash synchronization is configured, user credentials are synchronized securely from on-premises Active Directory to Azure AD, allowing users to log into cloud applications using the same passwords they use on their local network. This enhances user experience as it eliminates the need for multiple sets of credentials while maintaining security standards. Additionally, this setup supports various benefits such as easier user management and the ability to enforce security policies consistently across both environments. Users can access cloud resources without needing to remember different passwords, which is particularly useful in corporate settings where users access both on-premises and cloud applications. In contrast, other solutions presented do not directly enable SSO in the same seamless manner. Installing an on-premises AD DS server in an Azure VM would create a separate identity infrastructure without providing the direct SSO integration offered by Azure AD Connect. Enabling multi-factor authentication focuses on security by adding another layer of authentication but does not inherently solve the issue of single sign-on. Config