Explanation/Reference:
Explanation:
Windows Integrated Authentication makes use of Negotiate/Kerberos or NTLM to authenticate users based on an encrypted ticket/message passed between a browser and a server.
With Azure AD you need Forms-based authentication in ADFS for Azure AD/MSOnline PowerShell Module and Azure AD Self-Service Password Reset.
In Active Directory mapping, when the IIS server receives a certificate from the user, it passes it on to Active Directory, which maps it to a Windows user account. The IIS server then logs this account on.
Active directory mapping is most useful when the account mappings are the same on all IIS servers.
Administration is simplified because the mapping is done in only one place.
Incorrect Answers:
A. Windows Integrated Authentication using Negotiate for NTLM is not a valid option.
References:
https://authenticationfactor.wordpress.com/2014/06/18/adfs-3-0-playing-with-authentication/
https://blogs.msdn.microsoft.com/benjaminperkins/2011/09/14/integrated-windows-authentication-with- negotiate/
https://jorgequestforknowledge.wordpress.com/2017/03/29/why-you-should-turn-on-forms-based- authentication-fba-for-the-intranet-in-adfs/
https://msdn.microsoft.com/en-us/library/bb742438.aspx