Microsoft Azure Architect Design (AZ-304) Practice Test

What service should be used to support virtual machines that require domain join, LDAP, and Kerberos authentication for a company deploying Azure AD Connect?

1. Azure AD Domain Services

2. Azure AD Privileged Identity Management

3. Azure AD Managed Service Identity

4. Active Directory Federation Services

The correct answer is: Azure AD Domain Services

Azure AD Domain Services is the appropriate choice for supporting virtual machines that require features like domain join, LDAP, and Kerberos authentication when implementing Azure AD Connect. This service provides a managed domain that allows applications and services to use traditional Active Directory features without the need for deploying their own domain controllers. When deploying Azure AD Connect, the primary function is to synchronize on-premises directories with Azure Active Directory. Azure AD Domain Services complements this by offering the necessary infrastructure for applications and virtual machines that rely on familiar Active Directory capabilities such as domain join and authentication. This is particularly useful for organizations transitioning to cloud environments while still needing to support legacy applications or workloads that depend on traditional Active Directory functionalities. In summary, Azure AD Domain Services provides the essential domain management and authentication features in an Azure-based setup, making it the right choice for scenarios requiring LDAP and Kerberos authentication for virtual machines requiring domain join.