AZ-140 · Question #292
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com. The domain contains two users named User1 and User2. You have a Microsoft Entra tenant name
The correct answer is D. User2 and User3 only. Microsoft Entra Kerberos authentication for Azure Files supports two identity types: hybrid identities (AD DS users synced to Microsoft Entra ID) and cloud-only Microsoft Entra identities. It does NOT support pure on-premises AD DS accounts that have no corresponding Entra ID obj
Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com. The domain contains two users named User1 and User2. You have a Microsoft Entra tenant named contoso.com that contains a user named User3 and syncs with corp.contoso.com. The sync status of the users is shown in the following table. You have an Azure Virtual Desktop deployment that contains Microsoft Entra joined session hosts. You create an Azure Storage account that has the following configurations:
- Name: storage1
- Kind: FileStorage
- File share: share1
- Microsoft Entra Kerberos: Enabled
You need to implement FSLogix profile containers on share1. For which users can you implement a profile container?
Exhibit
Options
- AUser1 only
- BUser2 only
- CUser1 and User2 only
- DUser2 and User3 only
- EUser1, User2, and User3
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C21% (4)
- D58% (11)
- E11% (2)
Explanation
Microsoft Entra Kerberos authentication for Azure Files supports two identity types: hybrid identities (AD DS users synced to Microsoft Entra ID) and cloud-only Microsoft Entra identities. It does NOT support pure on-premises AD DS accounts that have no corresponding Entra ID object. Based on the sync status table, User1 is an on-premises AD DS user with no Entra ID sync (not supported), User2 is an AD DS user synced to Entra ID as a hybrid identity (supported), and User3 is a cloud-only Entra ID user (supported). Therefore, only User2 and User3 can authenticate to share1 using Entra Kerberos and receive FSLogix profile containers.
Topics
Community Discussion
No community discussion yet for this question.