100-140 Question 133
Single answerYour organization has recently adopted a hybrid environment where on-premises systems use Active Directory (AD), and cloud resources are managed via Azure Entra ID. A user reports they are unable to access a cloud-based application that requires Single Sign-On (SSO). As an IT support technician, what is the MOST likely cause of the issue?
- A
The user account is not synchronized between Active Directory and Azure Entra ID.
- B
The application is not registered in Azure Entra ID.
- C
The AWS IAM permissions are incorrectly configured for the user.
- D
The Active Directory server is experiencing downtime.
Show answer and explanation
Correct answer: A
Explanation
In a hybrid environment, user accounts need to be synchronized between on-premises Active Directory and Azure Entra ID to enable seamless Single Sign-On (SSO) for cloud applications. If synchronization is not properly configured or the user account is missing in Azure Entra ID, the user will encounter access issues. The other options either do not align with the scenario or are unrelated to the described problem.
- A. Correct.
This is the most likely cause. For SSO to work in a hybrid environment, accounts must be synchronized between on-premises AD and Azure Entra ID. If the user's account is not synchronized, they will not be able to access cloud-based applications.
- B. Incorrect.
While this could cause issues accessing the application, the scenario does not indicate that the application is not registered in Azure Entra ID. The issue is more likely related to the user's account.
- C. Incorrect.
AWS IAM is unrelated to the scenario, as the organization is using Azure Entra ID for cloud-based access management. This option is irrelevant in this context.
- D. Incorrect.
Active Directory downtime would affect on-premises systems, but it would not directly prevent access to a cloud-based application using Azure Entra ID unless synchronization was actively required during login.