Microsoft Certified: Identity and Access Administrator AssociateImplement an authentication and access management solutionMedium
A global organization uses Azure AD Connect to synchronize user accounts from its on-premises Active Directory to Azure AD. The organization has users located in different geographical regions, and each region has its own set of domain controllers. To ensure high availability and disaster recovery for the synchronization service, what is the recommended deployment strategy for Azure AD Connect?
- ADeploy a single Azure AD Connect server in the primary datacenter and rely on its built-in redundancy.
- BDeploy multiple Azure AD Connect servers in an active-active configuration across different regions.
- CDeploy a primary Azure AD Connect server and a staging server in separate datacenters.
- DDeploy a single Azure AD Connect server with a redundant power supply and网络 connectivity.
Show answer & explanationAnswer & explanation
Correct answer: C. Deploy a primary Azure AD Connect server and a staging server in separate datacenters.
Azure AD Connect does not support an active-active configuration. The recommended high availability strategy is to deploy a primary Azure AD Connect server handling synchronization and a secondary (staging) server that is kept up-to-date but not actively synchronizing. In case of primary server failure, the staging server can be promoted to active.
Why the other options are wrong
- A. A single server is a single point of failure and does not provide high availability or disaster recovery for the service itself.
- B. Azure AD Connect does not support active-active configuration; attempting this could lead to directory corruption.
- D. While important for the server itself, this doesn't address the service-level high availability or disaster recovery for the synchronization process across regions.
Azure AD Connect Staging Mode
A feature of Azure AD Connect that allows deploying a second server that imports and synchronizes data without exporting it to Azure AD, serving as a hot standby.
- Provides high availability and disaster recovery for the synchronization service.
- Allows testing configuration changes before promoting the server to active.
- Only one server can be in active export mode at a time.
Memory trick: Connect servers: One active, one staged, always ready.