Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A large multinational corporation with a complex on-premises Active Directory infrastructure needs to synchronize user identities, groups, and contacts from their on-premises environment to Microsoft Entra ID. They require a robust and reliable solution for hybrid identity. Which Microsoft Entra component is designed for this purpose?
- AMicrosoft Entra Domain Services
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Connect
Microsoft Entra Connect is the primary tool used to integrate on-premises Active Directory with Microsoft Entra ID, synchronizing user accounts, groups, and contacts to enable a hybrid identity solution.
Why the other options are wrong
- A. Domain Services provides managed domain controllers in Azure, not for syncing from on-premises AD.
- B. Application Proxy publishes on-premises web apps, not for directory synchronization.
- C. Identity Protection detects risks, not for directory synchronization.
Microsoft Entra Connect
A Microsoft tool designed to integrate on-premises directories with Microsoft Entra ID, synchronizing user accounts, groups, and contacts to enable a hybrid identity environment.
- Synchronizes user identities from on-premises Active Directory.
- Supports password hash synchronization, pass-through authentication, and federation.
- Enables single sign-on (SSO) for users in a hybrid environment.
- Essential for managing identities in both on-premises and cloud environments.
Memory trick: Entra Connect: The bridge between your on-prem and cloud identities.