exam questions

Exam AZ-304 All Questions

View all questions & answers for the AZ-304 exam

Exam AZ-304 topic 9 question 1 discussion

Actual exam question from Microsoft's AZ-304
Question #: 1
Topic #: 9
[All AZ-304 Questions]

What should you include in the identity management strategy to support the planned changes?

  • A. Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.
  • B. Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.
  • C. Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.
  • D. Deploy a new Azure AD tenant for the authentication of new R&D projects.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Directory synchronization between Azure Active Directory (Azure AD) and corp.fabrikam.com must not be affected by a link failure between Azure and the on- premises network. (This requires domain controllers in Azure)
Users on the on-premises network must be able to authenticate to corp.fabrikam.com if an Internet link fails. (This requires domain controllers on-premises)

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
TOM1000
Highly Voted 4 years ago
C - Correct.
upvoted 31 times
...
nkv
Highly Voted 3 years, 7 months ago
came in exam on 20-sep-21, I passed, I choose given one
upvoted 7 times
...
santafe
Most Recent 2 years, 9 months ago
Selected Answer: C
correct answer
upvoted 1 times
...
sapien45
2 years, 10 months ago
C Active Directory servers. These are domain controllers implementing directory services (AD DS) running as VMs in the cloud. These servers can provide authentication of components running in your Azure virtual network. If your application is hosted partly on-premises and partly in Azure, it may be more efficient to replicate Active Directory Domain Services (AD DS) in Azure. This replication can reduce the latency caused by sending authentication requests from the cloud back to AD DS running on-premises. https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-extend-domain
upvoted 1 times
...
Dpejic
3 years, 4 months ago
On exam 24.12.2021
upvoted 1 times
...
Dpejic
3 years, 4 months ago
Appere on exam 23-dec-2021
upvoted 1 times
...
Dpejic
3 years, 4 months ago
On exam today 22-Dec-21
upvoted 2 times
...
syu31svc
3 years, 7 months ago
"Users on the on-premises network must be able to authenticate to corp.fabrikam.com if an Internet link fails" Answer is C then
upvoted 4 times
...
poplovic
3 years, 7 months ago
The requirement says "User on the on-prem must be able to authenticate to corp.fabrikam.com if an internet link fails" --> meaning, you could keep at least on DS in the on-prem. This invalidates (A) "ALL R&D remain on-prem", this invalidates (B) (D) (C) is correct
upvoted 4 times
...
BoxGhost
3 years, 8 months ago
Given answer is correct but explanation is wrong. Dirsync has no bearing on weather the link between on-prem Azure goes down. So process of elimation A - Wrong, no logic in moving all DC's to Azure when they still have on-premise workloads B - Wrong, no point in doing this as it sates R&D are going to remain on-premise D - Again wrong, the R&D is staying on-premise so why deploy an Azure AD tenant for it C - seems like a good idea if they are trying to migrate stuff to Azure
upvoted 4 times
J4U
3 years, 7 months ago
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-extend-domain
upvoted 1 times
...
...
nExoR
3 years, 10 months ago
C is the only sensible answer
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago