A logistics company plans to migrate its custom order dispatch system to Azure. The system runs on several physical Windows and Linux servers. The database runs on a Microsoft SQL Server instance that requires cross-database queries and utilizes SQL Server Agent jobs. The company wants to implement a hybrid identity model for users to access the migrated system using their on-premises credentials. Security policies require that authentication credentials must be validated on-premises without deploying any federated identity infrastructure.
You need to recommend the components and targets for the migration assessment and strategy.
Which two recommendations should you include? (Choose two.)
- Migrate the database to Azure SQL Managed InstanceAnswer
- Configure Microsoft Entra Pass-through Authentication (PTA) with Seamless Single Sign-On (SSO)Answer
- CMigrate the database to an Azure SQL Database single database
- DDeploy Active Directory Federation Services (AD FS) to authenticate users on-premises
- EGroup the application servers for migration without performing a dependency assessment
Answer
Migrate the database to Azure SQL Managed Instance and configure Microsoft Entra Pass-through Authentication (PTA) with Seamless Single Sign-On (SSO).
The correct recommendations are to migrate the database to Azure SQL Managed Instance and configure Microsoft Entra Pass-through Authentication (PTA) with Seamless Single Sign-On (SSO). Azure SQL Managed Instance supports instance-scoped features such as cross-database queries and SQL Server Agent, which are necessary for this workload. Pass-through Authentication meets the requirement to validate credentials against the on-premises Active Directory without the administrative overhead and complexity of federated identity infrastructure.
Step-by-Step Solution
Key Concept
Selecting target database tiers and hybrid identity authentication methods based on legacy dependencies and security policies.