Microsoft Certified: Azure Administrator AssociateImplement and manage hybrid identitiesMedium
A company has configured Azure AD Connect to synchronize identities from their on-premises Active Directory. They observe that user sign-in attempts to Azure AD-integrated applications are sometimes slow, and they want a tool to monitor the health of their synchronization service and identify potential performance bottlenecks or errors. Which Azure service should they use?
- AAzure AD Connect Health
- BAzure Security Center
- CAzure Network Watcher
- DAzure Monitor
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD Connect Health
Azure AD Connect Health is specifically designed to monitor your on-premises identity infrastructure, including Azure AD Connect synchronization services, AD FS, and Active Directory Domain Services. It provides reports on synchronization errors, agent status, and performance metrics.
Why the other options are wrong
- B. Azure Security Center (now Microsoft Defender for Cloud) focuses on security posture management and threat protection, not the operational health of Azure AD Connect synchronization.
- C. Azure Network Watcher is for monitoring network performance and diagnostics, not identity synchronization health.
- D. Azure Monitor is a broad monitoring service for Azure resources but doesn't provide specific insights into Azure AD Connect synchronization health out-of-the-box.
Azure AD Connect Health
A monitoring service that provides insights into the health and performance of your on-premises identity infrastructure synchronized with Azure AD.
- Monitors Azure AD Connect sync, AD FS, and AD DS.
- Provides alerts for issues like sync errors or agent downtime.
- Accessible via the Azure portal.
Memory trick: Health Checks Connect, Keep Identity Strong.