Home › Azure AZ-900 › cloudcomputing › identitysecurity › Microsoft Entra Domain Services differs from Mic…
Microsoft Entra Domain Services differs from Microsoft Entra ID in that Domain Services:
AIs a third-party fork of Entra ID owned by an external vendor
BProvides a managed, Active-Directory-compatible domain with LDAP, Kerberos, NTLM, and domain join — for legacy workloads that need AD DS protocols
CIs a Microsoft 365 add-on that only handles email
DIs a cheaper consumer-grade tier of Entra ID with no enterprise features
Answer & Solution
Correct answer: B. Provides a managed, Active-Directory-compatible domain with LDAP, Kerberos, NTLM, and domain join — for legacy workloads that need AD DS protocols
Entra Domain Services is a managed AD DS instance — it serves the classic protocols (LDAP/Kerberos/NTLM, group policy, domain join) for legacy on-prem-style workloads moved to Azure. Entra ID itself is cloud-native (OIDC/SAML). The other options are wrong characterisations.
Related questions
An administrator wants to grant a contractor read-only access to ONE specific resource groWhich Microsoft Entra capability adds a second authentication factor like an AuthenticatorMicrosoft Defender for Cloud is best described as:The defense-in-depth model recommends:The Zero Trust security model is based on which guiding principle?Microsoft Entra B2B (external identities) is designed to let an organisation:Azure role-based access control (RBAC) grants permissions by combining three things. WhichPasswordless authentication on Microsoft Entra typically replaces the password with which