[&] You want to enable self-service password reset with writeback to your on-premises Active directory accounts. What is the least cost option required to facilitate this?
- Azure AD premium P2 tier
- Azure AD premium P1 tier
- Azure AD basic tier
- Enterprise Mobility + Security

[&] Your company has an Azure AD tenant synch'ing with an on-premises Active directory domain. You need to ensure that if someone's account is disabled in Active Directory, they are immediately blocked from logging in to any cloud apps using their domain identity. Which of these options will satisfy the requirement with the least administrative effort? (choose the best answer)
- Implement ADFS federation
- Implement password hash sync with writeback
- Implement password hash sync
- Implement pass-through authentication