Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company is migrating several legacy applications to Azure. These applications rely heavily on traditional LDAP and Kerberos authentication, and re-writing them is not feasible. The company needs to provide managed domain services in Azure to support these applications. Which Microsoft Entra capability should they use?
- AMicrosoft Entra B2B Collaboration
- BMicrosoft Entra Domain Services
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Connect
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Domain Services
Microsoft Entra Domain Services provides managed domain services like traditional Active Directory, supporting LDAP, Kerberos, and NTLM authentication, which is essential for lifting and shifting legacy applications to Azure without re-writing them.
Why the other options are wrong
- A. B2B Collaboration focuses on external user access.
- C. Identity Protection detects and remediates identity risks.
- D. Connect synchronizes on-premises AD to Entra ID, but doesn't provide managed domain controllers in Azure.
Microsoft Entra Domain Services
A managed domain controller service provided by Microsoft Entra ID that offers traditional Active Directory domain services (like LDAP, Kerberos, NTLM) in Azure.
- Enables lift-and-shift of legacy applications to Azure.
- Provides a managed, highly available, and scalable domain.
- Integrated with your Microsoft Entra ID tenant.
Memory trick: Domain Services brings your old AD castle to the cloud, brick by brick, without rebuilding.