az-900 Practice Question 514
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Statements
Identities stored in an on-premises Active Directory canbe synchronizedto § QO
‘Azure Active Directory (Azure AD).
Identities stored in Azue Active Directory (Azure AD), third-party coud services,
and on-premises Active Directory can be used to access Azure resources.
‘Azure has builtin authentication and authorization services that provide secwe =) G)
access to Azure resources.
Statements Yes No
Identities stored in an on-premises Active Directory can be synchronizedto § (GO
‘Azure Active Directory (Azure AD).
Answer Options
C
Box 1: Yes -
Correct Answer
C: Box 1: Yes -
Explanation
Box 1: Yes -
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD
Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that are related to synchronize identity data
between your on-premises environment and
Azure AD.
Box 2: Yes -
As described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. This is known as
'federation'.
Federation is a collection of domains that have established trust. The level of trust may vary, but typically includes authentication and almost
always includes authorization. A typical federation might include a number of organizations that have established trust for shared access to a
set of resources.
Box 3: Yes -
Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization
service to provide secure access to Azure resources.