Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company is migrating various legacy applications to Azure and needs to provide managed domain services (like domain join, group policy, and LDAP) for their Azure-hosted virtual machines without deploying and managing traditional domain controllers. Which Microsoft Entra capability provides this service?
- AMicrosoft Entra Application Proxy
- BMicrosoft Entra Connect
- CMicrosoft Entra ID Protection
- DMicrosoft Entra Domain Services
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Domain Services
Microsoft Entra Domain Services provides managed domain services for Azure virtual machines, allowing them to use traditional AD DS features like domain join, group policy, and LDAP without deploying and managing domain controllers.
Why the other options are wrong
- A. Application Proxy provides secure remote access to on-premises web apps.
- B. Connect synchronizes on-premises AD with Microsoft Entra ID.
- C. ID Protection detects and remediates identity-based risks.
Microsoft Entra Domain Services
A managed domain service that provides traditional AD DS capabilities (like domain join, group policy, LDAP) for Azure virtual machines and applications.
- Eliminates the need to deploy and manage domain controllers in Azure
- Integrates with existing Microsoft Entra ID for user and group synchronization
- Supports traditional protocols like Kerberos, NTLM, and LDAP
Memory trick: Domain Services brings AD to your Azure cloud, managed.