Examkin

Soru

Zorluk: OrtaHybrid and Multi-Tenant Identity Solutions

A conglomerate has an on-premises Active Directory Domain Services (AD DS) forest and three Microsoft Entra ID tenants. You are designing a hybrid and multi-tenant identity solution that must satisfy constraints regarding hybrid synchronization footprints, external collaboration types, self-service governance, and multi-tenant synchronization. Match each business and technical requirement to the most appropriate Microsoft Entra ID technology.

  • Sync users from an isolated on-premises forest with no direct network connectivity to the primary sync server, while supporting password hash sync for authentication continuity.Microsoft Entra Connect cloud sync
  • Enable users from a sister company's Entra tenant to collaborate in Microsoft Teams shared channels without generating guest user accounts.Microsoft Entra B2B direct connect
  • Provide external vendors access to internal line-of-business apps using guest accounts that support identity governance access reviews.Microsoft Entra B2B collaboration
  • Provision and update internal user objects across all three Microsoft Entra tenants to build a unified global address list.Cross-tenant synchronization

Cevap

Syncing from a disconnected forest matches Microsoft Entra Connect cloud sync; collaborating in Teams shared channels without guest accounts matches Microsoft Entra B2B direct connect; providing partner access to web applications with guest management matches Microsoft Entra B2B collaboration; and automating internal sync across multiple corporate tenants matches Cross-tenant synchronization.
The correct matches map each business scenario to the precise Entra capability: cloud sync is the lightweight option for isolated forests; B2B direct connect allows direct Teams channel sharing without guest objects; B2B collaboration provides guest-based application governance; and cross-tenant sync replicates internal users across cloud tenants.

Adım Adım Çözüm

1
Analyze the isolated on-premises forest sync requirement with minimal infrastructure footprint.
Identify Microsoft Entra Connect cloud sync as the optimal lightweight sync method that routes through the cloud.
Cloud sync is suited for scenarios like mergers where networks are separated and minimal local footprint is desired.
2
Evaluate Teams shared channels collaboration requirements that must avoid guest account overhead.
Identify Microsoft Entra B2B direct connect.
Direct connect is designed for real-time collaboration where users authenticate in their home directory, bypassing guest account creation entirely.
3
Examine external web application access that requires full identity lifecycle governance.
Identify Microsoft Entra B2B collaboration.
B2B collaboration creates guest accounts that are fully compatible with access reviews and typical application assignments.
4
Determine the synchronization mechanism for internal users across multiple managed Microsoft Entra tenants.
Identify Cross-tenant synchronization.
Cross-tenant synchronization enables automatic user provisioning between different Entra tenants in a multi-tenant organization.

Anahtar Kavram

Selecting hybrid and multi-tenant identity technologies based on connection, security, and lifecycle requirements.
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Hybrid and Multi-Tenant Identity Solutions

Bu konudan daha fazla soru