Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A large multinational corporation with a complex on-premises Active Directory infrastructure needs to synchronize user identities, groups, and contacts from their on-premises environment to Microsoft Entra ID. They also require password hash synchronization. Which Microsoft Entra tool should they deploy?
- AMicrosoft Entra Domain Services
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra ID Protection
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Connect
Microsoft Entra Connect is the tool used to synchronize on-premises Active Directory identities (users, groups, contacts) to Microsoft Entra ID, and it supports password hash synchronization.
Why the other options are wrong
- A. Domain Services provides managed domain services in Azure, not for synchronizing on-premises AD to Entra ID.
- B. Application Proxy provides secure remote access to on-premises web applications, not identity synchronization.
- C. ID Protection focuses on detecting and remediating identity-based risks, not directory synchronization.
Microsoft Entra Connect
A Microsoft tool designed to meet and accomplish your hybrid identity goals by synchronizing users, groups, and contacts between your on-premises Active Directory and Microsoft Entra ID.
- Synchronizes identities from on-premises AD to Microsoft Entra ID.
- Supports Password Hash Synchronization (PHS) and Pass-through Authentication (PTA).
- Enables seamless user experience in hybrid environments.
Memory trick: Connect links your old directory to the new cloud.