Exam AZ-301 topic 2 question 40 discussion

Actual exam question from Microsoft's AZ-301

Question #: 40
Topic #: 2

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.
Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.
You need to enable single sign-on (SSO) for company users.
Solution: Configure an AD DS server in an Azure virtual machine (VM). Configure bidirectional replication.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Rajuuu at May 1, 2020, 10:17 a.m.

Comments

Submit Cancel

Rajuuu

Highly Voted 5 years, 2 months ago

B. Use Active Directory Connect (AD Connect ) to enable Seamless SSO .

upvoted 14 times

FailureIsnotAnOption

5 years, 1 month ago

Thank you.

upvoted 1 times

tartar

4 years, 9 months ago

B is ok

upvoted 2 times

...

glam

Most Recent 4 years, 4 months ago

B. No.

upvoted 2 times

...

bc5468521

4 years, 8 months ago

I believe A is OK too. see below Azure provides two solutions for implementing directory and identity services in Azure: Use Azure AD to create an Active Directory domain in the cloud and connect it to your on-premises Active Directory domain. Azure AD Connect integrates your on-premises directories with Azure AD. Extend your existing on-premises Active Directory infrastructure to Azure, by deploying a VM in Azure that runs AD DS as a Domain Controller. This architecture is more common when the on-premises network and the Azure virtual network (VNet) are connected by a VPN or ExpressRoute connection. Several variations of this architecture are possible: Create a domain in Azure and join it to your on-premises AD forest. Create a separate forest in Azure that is trusted by domains in your on-premises forest. Replicate an Active Directory Federation Services (AD FS) deployment to Azure.

upvoted 1 times

badfard

4 years, 7 months ago

No, B is correct. You need to install AD connect on prem...

upvoted 2 times

...