Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDHard
A consultant is assisting a small business with implementing Microsoft Entra Connect. The business has a single on-premises Active Directory domain, 'contoso.local', with approximately 300 user objects. They prefer a solution that requires minimal infrastructure, is resilient, and can be deployed quickly without significant changes to their network. They are also concerned about high availability of the synchronization service. Which Microsoft Entra Connect deployment option would best fit these requirements?
- AMicrosoft Entra Connect with Federation (AD FS)
- BMicrosoft Entra Connect with Password Hash Synchronization (PHS)
- CMicrosoft Entra Connect with Pass-through Authentication (PTA)
- DMicrosoft Entra Connect Cloud Sync
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Connect Cloud Sync
Microsoft Entra Connect Cloud Sync is ideal for small businesses with single domains, offering minimal infrastructure requirements (lightweight agents), high resilience (agents are self-updating and Microsoft manages the service), and quick deployment. It inherently supports high availability through multiple agents.
Why the other options are wrong
- A. Federation with AD FS involves significant infrastructure (servers, WAP, load balancers) and is explicitly against the 'minimal infrastructure' requirement.
- B. PHS with standard Microsoft Entra Connect requires a full Windows Server installation and management, which is more infrastructure than Cloud Sync.
- C. PTA also requires agents but the authentication flow is different, and the infrastructure management is similar to standard Connect, not 'minimal' compared to Cloud Sync.
Microsoft Entra Connect Cloud Sync
Microsoft Entra Connect Cloud Sync is a lightweight Microsoft Entra Connect agent-based service that synchronizes users, groups, and contacts from on-premises Active Directory to Microsoft Entra ID. It's designed for hybrid identity scenarios with simpler requirements, minimal infrastructure, and high resilience.
- Lightweight agents, cloud-managed.
- Good for multi-forest, disconnected forests, or small environments.
- Supports high availability with multiple agents.
Memory trick: Sync Options: Choose Your Engine