Microsoft Exam AZ-305 Topic 3 Question 66 Discussion

Actual exam question for Microsoft's AZ-305 exam

Question #: 66
Topic #: 3

A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription.

Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), and Azure AD Connect

Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso.

A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription.

You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources.

What should you recommend?

AConfigure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.

BConfigure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.

CIn the Azure AD tenant of Contoso, use MIM to create guest accounts for the Fabrikam developers.

DConfigure an AD FS relying party trust between the fabrikam and Contoso AD FS infrastructures.

Show Suggested Answer

Suggested Answer: C

by Anthony at Sep 13, 2024, 02:25 AM

Limited Time Offer

25%

Off

Get Premium AZ-305 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nadine

1 months ago

Haha, imagine if they tried to set up a forest trust. That would be like trying to untangle a ball of yarn with your eyes closed!

upvoted 0 times

Jenise

21 days ago

D: Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.

upvoted 0 times

...

Kristeen

25 days ago

C: Configure an AD FS relying party trust between the fabrikam and Contoso AD FS infrastructures.

upvoted 0 times

...

Joni

1 months ago

B: In the Azure AD tenant of Contoso, use MIM to create guest accounts for the Fabrikam developers.

upvoted 0 times

...

Van

1 months ago

A: Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.

upvoted 0 times

...

Clorinda

2 months ago

Hmm, I'm leaning more towards B. Configuring an organization relationship between the Office 365 tenants might be a simpler solution than dealing with AD FS. Plus, it would allow for easier collaboration between the two companies.

upvoted 0 times

...

Vonda

2 months ago

I'm not sure about that. Wouldn't it be easier to just create guest accounts for the Fabrikam developers in the Contoso Azure AD tenant? That way, they can use their existing credentials without any complex setup.

upvoted 0 times

Frederica

20 days ago

User 2

upvoted 0 times

...

Roselle

1 months ago

User 1

upvoted 0 times

...

Stefany

2 months ago

I think the answer is D. Configuring an AD FS relying party trust between the Fabrikam and Contoso AD FS infrastructures will allow the Fabrikam developers to use their existing credentials to access resources in the Contoso Azure subscription.

upvoted 0 times

Darrel

11 days ago

Yes, it would definitely simplify things for both Contoso and Fabrikam.

upvoted 0 times

...

Alethea

1 months ago

That makes sense. It would streamline the access process for the Fabrikam developers.

upvoted 0 times

...

Kandis

1 months ago

Configuring an AD FS relying party trust between the Fabrikam and Contoso AD FS infrastructures will allow the Fabrikam developers to use their existing credentials to access resources in the Contoso Azure subscription.

upvoted 0 times

...

Dewitt

1 months ago

I think the answer is D.

upvoted 0 times

...

Lili

2 months ago

I'm not sure about that. Maybe we should consider option D) Configure an AD FS relying party trust between the Fabrikam and Contoso AD FS infrastructures for better security.

upvoted 0 times

...

Ilene

2 months ago

I agree with Gracia. Setting up a forest trust would allow seamless access for the Fabrikam developers using their existing credentials.

upvoted 0 times

...

Gracia

2 months ago

I think we should go with option A) Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.

upvoted 0 times

...