Exam AZ-304 topic 2 question 58 discussion

Actual exam question from Microsoft's AZ-304

Question #: 58
Topic #: 2

A company deploys Azure Active Directory (Azure AD) Connect to synchronize identity information from their on-premises Active Directory Domain Services (AD
DS) directory to their Azure AD tenant. The identity information that is synchronized includes user accounts, credential hashes for authentication (password sync), and group memberships. The company plans to deploy several Windows and Linux virtual machines (VMs) to support their applications.
The VMs have the following requirements:
✑ Support domain join, LDAP read, LDAP bind, NTLM and Kerberos authentication, and Group Policy.
✑ Allow users to sign in to the domain using their corporate credentials and connect remotely to the VM by using Remote Desktop.
You need to support the VM deployment.
Which service should you use?

A. Active Directory Federation Services (AD FS)
B. Azure AD Privileged Identity Management
C. Azure Managed Identity
D. Azure AD Domain Services

Show Suggested Answer

Suggested Answer: D 🗳️

by AlanJP at July 2, 2021, 5:04 p.m.

Comments

Submit Cancel

AlanJP

Highly Voted 3 years, 11 months ago

Answer seems correct

upvoted 16 times

d0bermannn

3 years, 10 months ago

and trivial:)

upvoted 2 times

...

vharsh16

Highly Voted 3 years, 10 months ago

correct. Azure Active Directory Domain Services (AD DS) provides managed domain services such as domain join, group policy, lightweight directory access protocol (LDAP), and Kerberos/NTLM authentication. You use these domain services without the need to deploy, manage, and patch domain controllers (DCs) in the cloud.

upvoted 8 times

...