Hybrid identity: custom banned passwords should apply to on-prem AD password changes too. What component extends Entra Password Protection on-premises?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Hybrid needs the DC agent + proxy so on-prem password changes hit the same banned list rules.
Full explanation below image
Full Explanation
Correct Answer — B
Password Protection extends to on-prem AD via proxy and DC agent. Wallpaper GPO, recording expiry, and KFM are unrelated.
Exam tip: Banned passwords on-prem AD → Password Protection DC agent.