Home Microsoft Exams Google Cloud Exams Pricing

Loading page

Curious about new developments and updates? Follow our social media.

Get a free certification question every week.

Microsoft Exams

AZ-104 Administrator
AZ-204 Developer
AZ-900 Fundamentals
All Microsoft Exams

Google Cloud Exams

Associate Data Practitioner
All Google Cloud Exams

Features

Readiness assessment
Practice tests
Focused practice
Explanations & AI tutor
Study guides & quizzes

Compare

vs Tutorials Dojo
vs Whizlabs
All comparisons

Terms Privacy CookiesSecurity About Pricing

StudyCerts is an independent service and is not affiliated with, endorsed by, or sponsored by any certification body or cloud provider. All questions and study content are original practice material and are not actual exam questions.

Home
Microsoft Exams
Azure
AZ-900 Microsoft Azure Fundamentals Exam
Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services
Hybrid Identity Synchronization Architecture

Diagram

Hybrid Identity Synchronization Architecture

X LinkedIn Facebook Reddit

A system architecture diagram showing how Microsoft Entra Connect synchronizes on-premises Active Directory to Microsoft Entra ID, which then automatically synchronizes identities to Microsoft Entra Domain Services for legacy app authentication.

In the Domain

Analyze Security Features and Best Practices

Integration and synchronization between Entra ID and Domain Services is seamless and automatic. A single wizard in the Microsoft Entra admin center enables Domain Services for your tenant. After setup, user accounts, group memberships, and credentials are synchronized from Entra ID (or on-premises Active Directory via Microsoft Entra Connect) into the managed domain. This synchronization ensures that corporate credentials remain consistent and that IT teams don't need to manage or patch domain controllers.

Entra Domain Services supports NTLM and Kerberos authentication, enabling Windows-integrated authentication for legacy and modern applications. High availability is built in by deploying multiple domain controllers, often across Azure Availability Zones for extra resilience. Additionally, replica sets can provide geographical disaster recovery, and one-way forest trusts allow secure connections to on-premises domains without extending those domains directly.

Read it in the Domain summary

Domain 1 of 8

Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services

Read the Domain summary

Practice this Domain

15 practice questions

Practice this Domain

Last updated November 16, 2024

Domain 1 of 8

Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services

Read the Domain summary

Practice this Domain

15 practice questions

Practice this Domain

Practice questions in this domain

1.An organization is migrating a legacy line-of-business application from an on-premises datacenter to Azure Virtual Machines. The application has the following technical requirements: Must authenticate users using traditional Kerberos or NTLM protocols Virtual machines must support domain join and Group Policy management The IT team wants to avoid deploying, managing, or patching dedicated Windows Server domain controllers in the cloud Which identity service should the organization implement to meet these requirements?
2.An organization is modernizing its cloud security strategy and wants to enhance protection for its cloud administrators. The security team requires that all administrators must pass a multi-factor authentication (MFA) prompt whenever they access administrative tools such as the Azure portal or Azure PowerShell, while normal sign-ins from trusted corporate office networks do not trigger extra prompts. Which Microsoft Entra ID feature should the organization implement to enforce this access requirement based on real-time signals?
3.An organization is migrating several legacy enterprise applications to Azure Virtual Machines as part of a lift-and-shift migration. These legacy applications require traditional directory features, including Kerberos authentication, LDAP directory lookups, and Group Policy management, but the IT team wants to avoid the administrative overhead of deploying, managing, and patching dedicated domain controller virtual machines in the cloud. Which identity service should the organization deploy to meet these requirements?
4.An organization wants to enhance the security posture of its cloud directory. The security team needs a solution that automatically detects identity-based risks—such as anomalous sign-in behavior, atypical travel, and compromised credentials—and triggers automated remediation actions such as requiring multifactor authentication (MFA) or password changes. Which Microsoft Entra ID feature should the organization implement?
5.An organization is migrating several corporate workloads to the cloud while retaining its on-premises Windows Server Active Directory infrastructure. The IT administration team must fulfill the following identity requirements: Provide employees with single sign-on (SSO) across Microsoft 365, cloud workloads, and third-party SaaS applications using a single organizational identity. Synchronize existing user accounts and security groups from the on-premises directory to the cloud. Which service should the organization implement to meet these requirements?

Loading page

Home
Microsoft Exams
Azure
AZ-900 Microsoft Azure Fundamentals Exam
Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services
Hybrid Identity Synchronization Architecture

Diagram

Hybrid Identity Synchronization Architecture

X LinkedIn Facebook Reddit

In the Domain

Analyze Security Features and Best Practices

Integration and synchronization between Entra ID and Domain Services is seamless and automatic. A single wizard in the Microsoft Entra admin center enables Domain Services for your tenant. After setup, user accounts, group memberships, and credentials are synchronized from Entra ID (or on-premises Active Directory via Microsoft Entra Connect) into the managed domain. This synchronization ensures that corporate credentials remain consistent and that IT teams don't need to manage or patch domain controllers.

Entra Domain Services supports NTLM and Kerberos authentication, enabling Windows-integrated authentication for legacy and modern applications. High availability is built in by deploying multiple domain controllers, often across Azure Availability Zones for extra resilience. Additionally, replica sets can provide geographical disaster recovery, and one-way forest trusts allow secure connections to on-premises domains without extending those domains directly.

Read it in the Domain summary

Domain 1 of 8

Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services

Read the Domain summary

Practice this Domain

15 practice questions

Practice this Domain

Last updated November 16, 2024

Domain 1 of 8

Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services

Read the Domain summary

Practice this Domain

15 practice questions

Practice this Domain

Practice questions in this domain

1.An organization is migrating a legacy line-of-business application from an on-premises datacenter to Azure Virtual Machines. The application has the following technical requirements: Must authenticate users using traditional Kerberos or NTLM protocols Virtual machines must support domain join and Group Policy management The IT team wants to avoid deploying, managing, or patching dedicated Windows Server domain controllers in the cloud Which identity service should the organization implement to meet these requirements?
2.An organization is modernizing its cloud security strategy and wants to enhance protection for its cloud administrators. The security team requires that all administrators must pass a multi-factor authentication (MFA) prompt whenever they access administrative tools such as the Azure portal or Azure PowerShell, while normal sign-ins from trusted corporate office networks do not trigger extra prompts. Which Microsoft Entra ID feature should the organization implement to enforce this access requirement based on real-time signals?
3.An organization is migrating several legacy enterprise applications to Azure Virtual Machines as part of a lift-and-shift migration. These legacy applications require traditional directory features, including Kerberos authentication, LDAP directory lookups, and Group Policy management, but the IT team wants to avoid the administrative overhead of deploying, managing, and patching dedicated domain controller virtual machines in the cloud. Which identity service should the organization deploy to meet these requirements?
4.An organization wants to enhance the security posture of its cloud directory. The security team needs a solution that automatically detects identity-based risks—such as anomalous sign-in behavior, atypical travel, and compromised credentials—and triggers automated remediation actions such as requiring multifactor authentication (MFA) or password changes. Which Microsoft Entra ID feature should the organization implement?
5.An organization is migrating several corporate workloads to the cloud while retaining its on-premises Windows Server Active Directory infrastructure. The IT administration team must fulfill the following identity requirements: Provide employees with single sign-on (SSO) across Microsoft 365, cloud workloads, and third-party SaaS applications using a single organizational identity. Synchronize existing user accounts and security groups from the on-premises directory to the cloud. Which service should the organization implement to meet these requirements?