Implement and manage hybrid identity
Objective hybrid.identity sits in Implement and manage user identities, which carries 22% of the Identity and Access Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A company using Workday as its HR system wants new hires automatically created in both on-premises Active Directory and Microsoft Entra ID as soon as HR records them. Which capability should the identity administrator configure?
The concept
Hybrid identity lifecycle management relies on inbound provisioning from an authoritative HR source to automatically maintain matching user identities across both Active Directory and Microsoft Entra ID.
Why this answer
Inbound provisioning from HR sources such as Workday or SuccessFactors is the feature described as automatically maintaining user identities in both Active Directory and Microsoft Entra ID based on HR signals, which matches the scenario's requirement.
- Correct: this is the feature that pulls HR data to create and maintain identities in both directories.
- BLifecycle workflows automate tasks at key events like start or leave dates, but they do not create the account from HR data itself.
- CEntitlement management assigns access packages such as group and app roles, it does not create the initial identity from HR records.
- DAccess reviews recertify existing guest access, they are unrelated to creating identities from an HR feed.
- EAzure RBAC governs access to Azure resources through role assignments, not identity creation from HR systems.
Now you: objective hybrid.identity questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
Password hash synchronisation is enabled between an on-premises directory and the cloud. What is synchronised?
Sample question 2 of 3
Which additional protection does enabling password hash synchronisation make available for hybrid accounts?
Sample question 3 of 3
An organisation enables password hash synchronisation today. Which leaked credentials will be evaluated against its tenant?
Full Identity and Access Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.