You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run…

The correct answer is C. an Azure Resource Manager (ARM) template. ARM templates can include the 'JsonADDomainExtension' VM extension (Microsoft.Compute/virtualMachines/extensions), which automatically joins Azure VMs to an on-premises AD DS domain at provisioning time. This is the most scalable way to domain-join 100 VMs consistently and…

Manage Windows Servers and workloads in a hybrid environment

Question

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

Options

AAzure AD Connect
Ba Group Policy Object (GPO)
Can Azure Resource Manager (ARM) template
Dan Azure management group

How the community answered

(47 responses)

A
4% (2)
B
15% (7)
C
72% (34)
D
9% (4)

Explanation

ARM templates can include the 'JsonADDomainExtension' VM extension (Microsoft.Compute/virtualMachines/extensions), which automatically joins Azure VMs to an on-premises AD DS domain at provisioning time. This is the most scalable way to domain-join 100 VMs consistently and repeatably. Azure AD Connect (option A) synchronizes identities between on-premises AD DS and Azure AD - it does not join VMs to a domain. Group Policy Objects (option B) can enforce settings on already-joined machines but cannot perform the initial domain join. Azure management groups (option D) are used to organize subscriptions for governance purposes and have no ability to join machines to a domain.

Topics

#Azure Virtual Machines#ARM templates#Active Directory Domain Services#Hybrid Identity

Community Discussion

No community discussion yet for this question.

Full AZ-800 Practice