Question 1

You are migrating a legacy application to Azure Virtual Machines. The application relies heavily on LDAP read/write operations and NTLM/Kerberos authentication.

The company has already synchronized their on-premises Active Directory to Microsoft Entra ID (Azure AD) using Entra Connect. They want to decommission their on-premises domain controllers and do not want to manage any domain controller VMs in Azure (IaaS).

Which service should you recommend to support the legacy application?

Accepted Answer

Identify the PaaS service that provides legacy AD protocols (NTLM, Kerberos, LDAP) in Azure.

Question 2

What mistakes do candidates make on this AZ-305 question?

Accepted Answer

Assuming native Entra ID supports LDAP or Kerberos. It only supports modern protocols like SAML, OAuth 2.0, and OpenID Connect.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 2

More questions from this exam