Denver Water Interview Question

Given an environment with on-prem AD and Azure directory connected by Azure AD Connect - what security concerns exist?