Cloud · Microsoft Azure · Certifications
AZ-500: HDInsight authentication with on-premises AD
Select one answer. Your result and the explanation will appear immediately.
Question 12
You are setting up authentication for an Azure HDInsight cluster on a virtual network and want users to authenticate with their on-premises Active Directory credentials. Will deploying Azure AD Application Proxy fulfill this requirement?
Correct answer: No, while the Enterprise Security Package (ESP) is required for HDInsight authentication, Azure AD Application Proxy cannot replace the domain services or Kerberos support needed for on-premises Active Directory integration.
Azure AD Application Proxy publishes on-premises web applications for remote access; it does not provide the domain integration required by HDInsight. For HDInsight authentication with Active Directory credentials, use an Enterprise Security Package cluster and the required Active Directory Domain Services or Azure AD Domain Services and Kerberos integration.
Exam clue: HDInsight needs cluster-level domain and Kerberos integration. Application Proxy is an application publishing service, not a replacement for domain services.
Remember: Application Proxy provides remote access to web applications. HDInsight Enterprise Security Package provides the framework for domain-integrated HDInsight authentication.