Implement password hash synchronization Entra DS

What does password hash synchronization allow you to do?

• Disable password policies in Active Directory

• Use multiple password hashing algorithms simultaneously

• Store plain-text passwords in the cloud

• Synchronize user passwords from on-premises Active Directory to Microsoft Entra

How frequently does the password hash synchronization process run?

• Every hour

• Every 5 minutes

• Every 2 minutes

• Every 10 minutes

What happens to the existing cloud password when a new password is synchronized?

• It is archived

• It is deleted

• It remains unchanged

• It is overwritten

What is the purpose of the Keep me signed in (KMSI) option?

• To extend the session cookie duration to 180 days

• To bypass authentication for 30 days

• To disable password expiration

• To allow multiple sign-ins without password entry

Which command is used to enable password hash synchronization for specific connectors?

• Enable-PasswordSync

• Configure-PasswordHashSync

• Set-ADSyncAADPasswordSyncConfiguration

• Start-ADSync

What is the default setting for the CloudPasswordPolicyForPasswordSyncedUsersEnabled feature?

• Enabled

• Disabled

• Requires admin approval

• Automatically set to true

What is the main security benefit of password hash synchronization?

• Plain-text passwords are stored in the cloud

• It eliminates the need for user authentication

• SHA256 hash is more secure than MD4

• It allows for easier password recovery

What happens if a user changes their on-premises password?

• The password is encrypted and stored in SQL

• The updated password is synchronized to the cloud

• The user is logged out immediately

• The cloud password remains unchanged

Which PowerShell command is used to check the PasswordPolicies attribute for a user?

• Get-MgUser

• Check-UserPolicies

• List-UserAttributes

• Show-UserDetails

What is the effect of enabling the ForcePasswordChangeOnLogOn feature?

• Users can log in without a password

• Users must change their password at next logon

• It allows users to reset their passwords via email

• It disables password expiration