Question 1 of 30
A multinational corporation is implementing Active Directory Federation Services (AD FS) to enable single sign-on (SSO) across its various applications hosted in different regions. The IT team is tasked with configuring claims-based authentication to ensure that users from different domains can access resources seamlessly. They need to decide on the appropriate claims rules to issue the correct claims to the relying party trusts. Which of the following claims rules would best facilitate the federation process while ensuring that users are authenticated based on their organizational roles and attributes?
A rule that issues a claim based on the user's group membership in Active Directory, allowing access to specific applications based on their role within the organization.
A rule that issues a claim based solely on the user's email address, regardless of their group membership or organizational role.
A rule that issues a claim based on the user's last login time, which does not correlate with their current role or access needs.
A rule that issues a claim based on the user's physical location, which may not accurately reflect their organizational role or access rights.

Preparing for Microsoft SC-300 Microsoft Identity and Access Administrator? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free