SC-100 Question #312: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription that is linked to a Microsoft Entra tenant. You plan deploy an enterprise application named App1. App1 requires LDAP to look up attributes related to Microsoft Entra users. You need to recommend a solution to support the LDAP requirement. What should you recommend?

Options

• AConfigure a Conditional Access policy that has a trusted network location.
• BDeploy Microsoft Entra Private Access.
• CDeploy Microsoft Entra Domain Services.
• DImplement pass-through authentication.

Explanation

{"question_number": 2, "correct_answer": "C", "explanation": "Standard Microsoft Entra ID (cloud-only) does not support legacy protocols such as LDAP, NTLM, or Kerberos. Microsoft Entra Domain Services (formerly Azure AD Domain Services) is a managed domain service that provides these legacy capabilities, including LDAP queries, in Azure without requiring you to deploy and manage your own domain controllers. It synchronizes users and groups from Microsoft Entra ID and allows applications that require LDAP to look up user attributes. Conditional Access with a trusted network location (A) controls access conditions but adds no LDAP capability. Microsoft Entra Private Access (B) is a Zero Trust network access solution for private apps over the internet but does not provide an LDAP endpoint for Azure AD attributes. Pass-through authentication (D) lets on-premises Active Directory validate passwords but does not expose LDAP to cloud-hosted applications.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.