An AD-dependent application is moved to Azure and requires domain join, LDAP, Group Policy, and Kerberos without customer-managed domain controllers. What is the best fit?

Choose the single best answer.

A.Use Entra Domain Services after validating legacy requirements.
B.Use self-managed AD DS controllers while treating their operation as fully managed by Azure.
C.Use application proxy as the replacement domain service for domain join and Group Policy.
D.Use Entra ID alone as a direct LDAP and Kerberos domain-controller endpoint.

Show the answer and explanation

✓ Correct answer

Use Entra Domain Services after validating legacy requirements.

Entra Domain Services provides the listed managed legacy capabilities for supported workloads. Entra ID alone is not a direct LDAP/Kerberos domain service. Self-managed domain controllers retain customer operational responsibilities, and application proxy publishes supported web applications rather than supplying domain join or Group Policy. Source: AZ-305 Study Guide.pdf, PDF page(s) 16.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.