Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Solutions Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer: D. Azure AD Domain Services (Azure AD DS) Why? App1 uses LDAP queries. After migration, VMs cannot access the on-premises network. Azure AD DS provides managed domain services in Azure, including LDAP, Kerberos, and NTLM, allowing the application to continue using LDAP without connecting back to on-prem AD. Why not others? A. Azure AD Application Proxy → Publishes web apps, not LDAP. B. AD DS role on a VM → Requires building/managing domain controllers and doesn't leverage the synced identities directly. C. Azure VPN Gateway → Violates the requirement to prevent access to the on-premises network.
Microsoft Entra Domain Services
D. Azure AD Domain Services (Azure AD DS) Justification: Azure AD DS: Offers LDAP, Kerberos, and NTLM authentication without requiring a direct connection to on-premises AD, ensuring compliance with the security policy. Functionality: Allows App1 to perform LDAP queries to verify user identities using the synchronized data from Azure AD. Security: Prevents virtual machines in Subscription1 from accessing the on-premises network directly.