Question

Difficulty: Very hardMigration Assessment and Strategy

An organization is planning to migrate a business-critical application suite from an on-premises datacenter hosting physical servers and VMware vSphere virtual machines to Azure. During the assessment phase, the following technical requirements and constraints are identified:

* The backend database layer consists of multiple SQL Server databases on physical servers that perform cross-database queries, utilize SQL Server Agent for scheduled maintenance, and execute CLR assembly routines.
* The application servers are hosted on VMware vSphere VMs and have undocumented TCP connections to external partner APIs.
* For hybrid identity, users must authenticate against the on-premises Active Directory Domain Services (AD DS) in real time to meet security compliance, but the organization wants to minimize on-premises infrastructure footprint and administrative overhead.

Which combination of Azure Migrate assessment strategies, target database service tiers, and Microsoft Entra ID hybrid identity solutions should you recommend to meet all migration requirements?

  1. Enable Azure Migrate agent-based dependency analysis for all application servers, select Azure SQL Managed Instance as the database migration target, and implement Microsoft Entra Pass-through Authentication (PTA) with Seamless Single Sign-On (SSO).Answer
  2. B
    Enable Azure Migrate agentless dependency analysis for all application servers, select Azure SQL Database elastic pools as the database migration target, and deploy Active Directory Federation Services (AD FS) for identity management.
  3. C
    Enable Azure Migrate agent-based dependency analysis for all application servers, select Azure SQL Managed Instance as the database migration target, and deploy Active Directory Federation Services (AD FS) for identity federation.
  4. D
    Perform database migration directly without dependency analysis, select Azure SQL Database single databases as the database migration target, and implement Microsoft Entra Password Hash Synchronization (PHS) for user authentication.

Answer

Enable Azure Migrate agent-based dependency analysis for all application servers, select Azure SQL Managed Instance as the database migration target, and implement Microsoft Entra Pass-through Authentication (PTA) with Seamless Single Sign-On (SSO).
The correct recommendation is to enable agent-based dependency analysis to map the undocumented connections to external partner APIs, use Azure SQL Managed Instance to support SQL Server Agent, cross-database queries, and CLR, and deploy Pass-through Authentication (PTA) with Seamless SSO to validate credentials against the on-premises directory in real time with minimal footprint.

Step-by-Step Solution

1
Determine the database service tier required for the backend SQL databases.
Azure SQL Managed Instance
The databases require SQL Server Agent, cross-database queries, and CLR integration, which are not supported in Azure SQL Database single databases or elastic pools but are fully supported in Azure SQL Managed Instance.
2
Select the hybrid identity synchronization and authentication mechanism.
Microsoft Entra Pass-through Authentication (PTA) with Seamless SSO
PTA validates passwords directly against the on-premises AD DS in real time using lightweight agents, meeting compliance requirements without the heavy footprint and high administrative overhead of Active Directory Federation Services (AD FS).
3
Determine the dependency analysis strategy for the application servers.
Azure Migrate agent-based dependency analysis
Agent-based dependency analysis installs agents on the servers to capture all TCP connections, which is required to accurately map undocumented connections to external partner APIs where agentless discovery cannot retrieve connection details.

Key Concept

Selecting migration assessment and target service strategies based on legacy application compatibility, networking dependency mapping, and hybrid identity constraints.
Rate this question