SC-100 Certification Practice Question #123

Question

You have an Azure subscription that is linked to a Microsoft Entra tenant.

You plan deploy an enterprise application named App1. App1 requires LDAP to look up attributes related to Microsoft Entra users.

You need to recommend a solution to support the LDAP requirement.

What should you recommend?

Accepted Answer

App1 needs to perform LDAP lookups of attributes for Microsoft Entra users. Microsoft Entra ID itself does not expose an LDAP interface; the documented way to provide LDAP (and secure LDAP/LDAPS) over Entra-synchronized identities is **Microsoft Entra Domain Services**, which performs a one-way sync from Entra ID and supports LDAP bind/read against the managed domain. Conditional Access trusted locations and pass-through authentication address authentication, not directory protocol access, and Microsoft Entra Private Access is a network access broker with no LDAP capability — so C is the only option that satisfies the LDAP requirement. Suggested Answer, Most Voted (5), and MS Learn all agree.

More SC-100 practice questions