Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

What feature can a company use to enforce a password change policy in Azure AD?

1. Password writeback

2. Password Hash Sync

3. Azure AD Connect Health

4. Azure AD Identity Protection

The correct answer is: Password writeback

The feature that a company can utilize to enforce a password change policy in Azure AD is password writeback. This functionality enables users to change their passwords from cloud services like Azure AD and have those changes synchronized back to on-premises Active Directory. This capability is essential for organizations that operate in a hybrid environment, allowing them to maintain consistent password policies across both on-premises and cloud resources. By implementing password writeback, companies can ensure that users have the ability to reset their passwords securely while complying with organizational policies. This eliminates the need for relying solely on local directory services for password management, enhancing user experience and maintaining security consistency across platforms. In contrast, password hash sync primarily deals with synchronizing password hashes from on-premises Active Directory to Azure AD, but it does not facilitate password changes directly. Azure AD Connect Health is focused on monitoring and providing insights into the status of synchronization services, rather than enforcing password policies. Azure AD Identity Protection assists in detecting and responding to identity risks rather than managing password change policies.