Home › Azure AZ-305 › cloudcomputing › az305identitygov › Which Azure feature should an architect recommen…
Which Azure feature should an architect recommend so that the same Microsoft Entra workforce identity can authenticate to BOTH Azure resources AND legacy on-prem AD-integrated apps?
ASharing the admin password across both systems
BDisabling on-prem AD entirely
CMicrosoft Entra Connect (sync on-prem AD → Entra ID) + Entra Domain Services or pass-through auth/seamless SSO
DTwo separate identity stores with users typing different passwords for each
Answer & Solution
Correct answer: C. Microsoft Entra Connect (sync on-prem AD → Entra ID) + Entra Domain Services or pass-through auth/seamless SSO
Entra Connect (+ pass-through/seamless SSO/Domain Services) is the hybrid-identity pattern (per AZ-305 §1 identity). The others fragment identity or break legacy apps.
Related questions
Which Azure governance service should an architect recommend to track and report regulatorWhich Microsoft Entra feature should an architect recommend so external partners (e.g. conWhich Microsoft Entra ID feature should an architect recommend for adaptive risk-based autWhich Azure feature should an architect recommend to give an Azure VM or App Service an idWhich Azure governance hierarchy should an architect recommend so that a single Azure PoliWhich Azure governance feature should an architect recommend to enforce constraints acrossWhich Azure service should an architect recommend to centrally store and rotate secrets, cWhich Microsoft Entra ID feature should an architect recommend to give engineers JIT, appr