MD-102 · Question #468
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named dc1.contoso.com. You have a Microsoft 365 E5 subsc
The correct answer is A. VNet1 only. For Microsoft Entra hybrid join, the Azure network connection (ANC) virtual network must have connectivity to on-premises AD DS and be configured to use on-premises DNS servers.
Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named dc1.contoso.com. You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite. You have an Azure subscription that contains the resources shown in the following table. The subscription contains the virtual networks shown in the following table. You plan to deploy Windows 365 Enterprise Cloud PC. You need to create an Azure network connection (ANC) that will use Microsoft Entra hybrid join. Which virtual network can you use for the ANC?
Exhibit
Options
- AVNet1 only
- BVNet2 only
- CVNet3 only
- DVNet1 and VNet2
- EVNet1 and VNet3
How the community answered
(15 responses)- A60% (9)
- C7% (1)
- D20% (3)
- E13% (2)
Why each option
For Microsoft Entra hybrid join, the Azure network connection (ANC) virtual network must have connectivity to on-premises AD DS and be configured to use on-premises DNS servers.
VNet1 is peered to OnPremVNet, providing the necessary network connectivity to the on-premises Active Directory domain controller, and it is configured to use the on-premises domain controller's IP address (10.0.0.4) as its DNS server. These are essential requirements for Microsoft Entra hybrid join.
VNet2 has no peering to the on-premises network and uses Azure DNS default, preventing it from connecting to or resolving on-premises Active Directory for hybrid join.
VNet3 uses Azure DNS default and does not have direct connectivity or proper DNS resolution for the on-premises Active Directory, even if peered with VNet1.
VNet2 is unsuitable for hybrid join due to lack of on-premises connectivity and proper DNS configuration.
VNet3 is unsuitable for hybrid join due to its DNS configuration and lack of direct on-premises connectivity.
Concept tested: Windows 365 ANC hybrid join requirements
Source: https://learn.microsoft.com/en-us/windows-365/enterprise/on-premises-network-connections#network-requirements
Topics
Community Discussion
No community discussion yet for this question.