Hotspot Question You are planning a Microsoft Azure AD solution for a company. For each of the following statements, select Yes if the statements true. Otherwise, select No. NOTE: Each correct selecti

The correct answer is You can manage Azure AD-joined machines by using group policy. = No; Azure AD requires integration with Active Directory Domain Services by using secure lightweight Directory Access Protocol (LDAP). = No; Azure AD supports Azure AD Authentication Library (ADAL) authentication. = Yes. This question tests fundamental knowledge of Azure Active Directory (Azure AD) capabilities, specifically regarding device management, architectural requirements, and authentication libraries.

Submitted by helene.fr· Mar 5, 2026Describe security, compliance, privacy, and trust in Microsoft 365

Question

Hotspot Question You are planning a Microsoft Azure AD solution for a company. For each of the following statements, select Yes if the statements true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

Answer Area

You can manage Azure AD-joined machines by using group policy.No
Azure AD requires integration with Active Directory Domain Services by using secure lightweight Directory Access Protocol (LDAP).No
Azure AD supports Azure AD Authentication Library (ADAL) authentication.Yes

Explanation

This question tests fundamental knowledge of Azure Active Directory (Azure AD) capabilities, specifically regarding device management, architectural requirements, and authentication libraries.

Approach. Statement 1: Select 'No'. Azure AD-joined machines are typically managed using Mobile Device Management (MDM) solutions like Microsoft Intune. Traditional Group Policy Objects (GPOs) require on-premises Active Directory Domain Services (AD DS) or Azure AD Domain Services (Azure AD DS). Statement 2: Select 'No'. Azure AD is a cloud-based identity service that functions independently; it does not require on-premises AD DS. Furthermore, Azure AD relies on REST-based APIs (like Microsoft Graph) rather than LDAP. Statement 3: Select 'Yes'. Azure AD historically supported the Azure AD Authentication Library (ADAL) for developers to authenticate users to Azure AD. (Note: ADAL is deprecated in favor of MSAL, but the statement 'supports' or historically supported is considered correct in the context of this exam question).

Common mistakes.

common_mistake. A common mistake for Statement 1 is confusing Azure AD with Azure AD Domain Services (which does support GPOs). For Statement 2, users might confuse the optional hybrid synchronization (via Azure AD Connect) with a mandatory requirement, or confuse Azure AD's underlying protocols with traditional AD DS's use of LDAP. For Statement 3, users aware of MSAL might incorrectly think ADAL was never supported, rather than simply being an older/deprecated library.

Concept tested. Azure Active Directory Core Capabilities vs. Active Directory Domain Services (AD DS)

Reference. https://learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join

Topics

#Azure AD#group policy#LDAP#ADAL authentication

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice