Microsoft Certified: Azure Administrator AssociateImplement and manage hybrid identitiesMedium
A company uses Azure AD Connect with federation (AD FS) for hybrid identity. They want to monitor the health and performance of their AD FS infrastructure and ensure that users can authenticate successfully. Which Azure AD Connect component should they use for this purpose?
- AAzure AD Connect synchronization service
- BAzure AD Connect Health
- CAzure AD Join
- DAzure AD Connect wizard
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD Connect Health
Azure AD Connect Health provides robust monitoring capabilities for various identity components, including AD FS. It offers dashboards, alerts, and usage analytics to ensure the health and performance of the federation infrastructure.
Why the other options are wrong
- A. The synchronization service handles object synchronization, not the health of AD FS itself.
- C. Azure AD Join is a device management feature, unrelated to monitoring AD FS health.
- D. The Azure AD Connect wizard is used for initial configuration and modifications, not for ongoing monitoring.
Azure AD Connect Health for AD FS
A monitoring service that provides insights into the health, performance, and authentication activities of an on-premises Active Directory Federation Services (AD FS) deployment integrated with Azure AD.
- Monitors AD FS servers, web application proxies, and authentication attempts.
- Provides alerts for critical issues and performance bottlenecks.
- Helps troubleshoot authentication failures and track usage patterns.
Memory trick: To check the 'health' of the 'federated temple', use the 'Connect Health' tool.