SC-100 Certification Practice Question #166

Question

You have an on-premises network that has several legacy applications. The applications perform LDAP queries against an existing directory service.

You are migrating the on-premises infrastructure to a cloud-only infrastructure.

You need to recommend an identity solution for the infrastructure that supports the legacy applications. The solution must minimize the administrative effort to maintain the infrastructure.

Which identity service should you include in the recommendation?

Accepted Answer

The legacy apps require LDAP, which rules out Microsoft Entra ID (no LDAP endpoint) and Microsoft Entra External ID (customer/B2B identity). Self-hosting AD DS on Azure VMs would work but violates the "minimize administrative effort" requirement because you must deploy, patch, back up, and monitor the domain controllers yourself. Microsoft Entra Domain Services is the only option that exposes LDAP/Kerberos/NTLM as a fully managed service for cloud-only tenants, which is exactly the documented lift-and-shift / cloud-only legacy scenario. Suggested Answer, unanimous Most Voted, and MS Learn all converge on B.

More SC-100 practice questions