Implementing Pass-through Authentication (PTA) ensures that Azure AD delegates the authentication process directly to the on-premises Active Directory in real-time. When a user signs in, Azure AD routes the authentication request through a secure channel to the on-premises Authentication Agent, which verifies credentials against AD.
If a user account is disabled in Active Directory, authentication immediately fails because the request is validated directly against the on-premises domain controllers - there's no delay or dependency on synchronization intervals.
From Microsoft documentation (SC-300 official guide):
"Pass-through Authentication provides real-time authentication directly against on-premises Active Directory.
If an account is disabled on-premises, authentication requests are denied immediately." Thus, enabling PTA satisfies the requirement for immediate blocking of disabled accounts.
# Correct Answer: A. Yes