Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A company is migrating various applications to Azure and needs to provide managed domain services, such as domain join, group policy, LDAP, and Kerberos/NTLM authentication, for their Azure-based virtual machines and applications. They do not want to deploy and manage domain controllers on their own VMs. Which Microsoft Entra capability provides these managed domain services?
- AMicrosoft Entra ID Free
- BMicrosoft Entra Connect
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Verified ID
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Domain Services
Microsoft Entra Domain Services provides managed domain services (like domain join, group policy, LDAP, Kerberos/NTLM) directly within Azure, without requiring customers to deploy and manage domain controllers themselves. This is ideal for Azure-based VMs and applications needing traditional AD features.
Why the other options are wrong
- A. Microsoft Entra ID Free is a basic directory service and does not provide managed domain services like Group Policy or LDAP.
- B. Microsoft Entra Connect synchronizes on-premises AD with Microsoft Entra ID; it does not provide managed domain services in Azure.
- D. Microsoft Entra Verified ID is for decentralized identity and verifiable credentials, unrelated to managed domain services.
Microsoft Entra Domain Services
A managed domain service provided by Microsoft Entra ID that offers traditional Active Directory features (like domain join, group policy, LDAP, Kerberos/NTLM) for Azure virtual machines and applications, without requiring the deployment of domain controllers.
- Provides a managed, highly available domain in Azure.
- Compatible with traditional LDAP, Kerberos, NTLM.
- Enables domain join for Azure VMs.
- Synchronizes identities from Microsoft Entra ID.
Memory trick: Domain Services: Your Azure VMs get AD power, without the server headache.