Cloud · Microsoft Azure · Certifications
AZ-500: HDInsight authentication with Azure AD Domain Services
Select one answer. Your result and the explanation will appear immediately.
Question 19
You are designing a hybrid identity solution for a company using Azure HDInsight clusters on a virtual network. To enable on-premises Active Directory users to authenticate to the HDInsight cluster with their existing credentials, you propose deploying Azure AD Domain Services in Azure. Does this meet the requirement without additional configuration?
Correct answer: No.
Azure AD Domain Services provides managed domain services, but it must have the required Microsoft Entra users, groups, and password hashes available. For on-premises Active Directory users, configure synchronization to Microsoft Entra ID, typically with Azure AD Connect and password hash synchronization, before Azure AD Domain Services can support the authentication scenario.
Exam clue: The phrase “without additional configuration” is decisive. Deploying Azure AD Domain Services does not by itself synchronize an on-premises AD domain or make its credentials available.
Remember: Azure AD Domain Services is managed domain infrastructure, not an automatic bridge to on-premises AD. Synchronize identities and password hashes first.