Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A large manufacturing company is migrating several on-premises legacy applications to Azure. These applications historically relied on traditional Active Directory for authentication and authorization. The company wants to minimize application code changes during migration while leveraging cloud benefits. Which Microsoft Entra capability provides managed domain services for these legacy applications in Azure?
- AMicrosoft Entra Domain Services
- BMicrosoft Entra B2B Collaboration
- CMicrosoft Entra Verified ID
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Domain Services
Microsoft Entra Domain Services provides managed domain services, including domain join, group policy, LDAP, and Kerberos/NTLM authentication, which are essential for many legacy applications. It allows these applications to run in Azure without requiring significant code changes.
Why the other options are wrong
- B. Microsoft Entra B2B Collaboration is for inviting external users, not for providing domain services for legacy apps.
- C. Microsoft Entra Verified ID is for decentralized identity verification, not for integrating legacy applications with AD.
- D. Microsoft Entra Connect synchronizes on-premises Active Directory with Microsoft Entra ID, but doesn't provide managed domain services in Azure.
Microsoft Entra Domain Services
Provides managed domain services such as domain join, group policy, lightweight directory access protocol (LDAP), and Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory.
- Enables lift-and-shift of legacy applications to Azure
- No need to deploy, manage, or patch domain controllers
- Integrates with existing Microsoft Entra ID tenant
Memory trick: Old apps in cloud need a familiar AD hug.