While preparing for your exam make sure you understand how to securely authorize access to your on premise resources. This diagram’s a great reference.
It shows how Microsoft Entra ID works along with Microsoft Entra ID private access. So you’ll need to know what private access is and you’ll want to know how global secure access clients allow your users to connect to resources. So practice that.
One of the things we look at is connecting to things like SMB servers without ever directly touching a domain controller. This is a big security benefit.
Kerberos is another key thing. Kerberos tickets play a key role in authentication. And the connecting DC agents help bridge that gap. So understand how that process works.
Pay attention to traffic flow, green for internal, blue for internet, and how access is tightly controlled as part of this process.
Now keep in mind that hybrid identities and identity access are things that you may see on your exam. So definitely prepare for those.
Links:
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso