You have an Azure Active Directory (Azure AD) tenant that syncs to an Active Directory forest. The tenant-uses through authentication.
A corporate security policy states the following:
Domain controllers must never communicate directly to the internet.
Only required software must be- installed on servers.
The Active Directory domain contains the on-premises servers shown in the following table.

You need to ensure that users can authenticate to Azure AD if a server fails.
On which server should you install an additional pass-through authentication agent?
Suggested Answer: C
Get Premium SC-300 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
CO
Corinne
12 months ago
Surprised that Server2 isn't the obvious pick here!
RO
Rosendo
1 year ago
Wait, can we really install anything on these servers?
AN
Annmarie
1 year ago
Isn't Server3 already overloaded?
LI
Lindsay
1 year ago
I disagree, Server1 seems more reliable.
MI
Miesha
1 year ago
Server4 is the best choice for the pass-through agent.
LE
Lettie
1 year ago
I feel like Server1 is a good option because it’s often the primary server, but I can't recall if it has any specific limitations.
LO
Louvenia
1 year ago
I think we practiced a similar question where we had to consider server roles and their connectivity. Maybe Server4 could be a good choice since it might have less load?
RO
Rosendo
1 year ago
I remember we discussed the importance of having redundancy for authentication, but I'm not sure which server would be best for the additional agent.
MI
Minna
1 year ago
I vaguely remember that Server3 had some restrictions, but I’m not entirely sure if that affects its ability to handle pass-through authentication.
DE
Delisa
1 year ago
Hmm, I'm a bit confused by this question. The exhibit doesn't seem to clearly indicate the TLS version supported. I'll have to think this through carefully and make an educated guess.
JU
Judy
1 year ago
Adding more joins between queries? That doesn't sound right to me. I'm leaning towards avoiding functions in filters.
DO
Douglass
1 year ago
This question seems a bit tricky. I'll need to think it through carefully to make sure I understand the relationship between logical and physical test cases.
FE
Felix
1 year ago
I'm pretty sure the next step is that the resource owner authenticates and optionally authorizes with the authorization server. That sounds like the most logical next step in the process.