Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A company is migrating several legacy applications to Azure. These applications rely heavily on traditional LDAP and Kerberos authentication for user and group management, but the company wants to avoid deploying and managing domain controllers in Azure VMs. Which Microsoft Entra capability provides managed domain services for these legacy applications in Azure?
- AMicrosoft Entra Connect
- BMicrosoft Entra Domain Services
- CMicrosoft Entra B2B Collaboration
- DMicrosoft Entra Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Domain Services
Microsoft Entra Domain Services provides managed domain services in Azure, offering compatibility with traditional LDAP and Kerberos authentication without the need to deploy, manage, and patch domain controllers. This directly supports legacy applications migrating to Azure while leveraging Microsoft Entra ID identities.
Why the other options are wrong
- A. Microsoft Entra Connect synchronizes on-premises AD with Microsoft Entra ID; it does not provide managed domain services in Azure.
- C. B2B Collaboration manages external user identities, not core domain services for applications.
- D. Application Proxy provides secure remote access to on-premises web apps, not managed domain services in Azure.
Microsoft Entra Domain Services
A managed domain service provided by Microsoft Entra ID that offers compatibility with traditional Active Directory-based applications, including LDAP and Kerberos authentication, without deploying and managing domain controllers.
- Provides managed domain controllers in Azure.
- Supports LDAP and Kerberos authentication.
- Integrates with Microsoft Entra ID for identity synchronization.
Memory trick: Domain Services is the old AD dog learning new Azure tricks.