AZ-900 Describe Azure architecture and services Practice Question
Which Azure service enables you to synchronize your on-premises Active Directory with Azure Active Directory?
⚠ Common exam trap
Test-takers frequently confuse Azure AD Connect (synchronization tool) with Azure AD Domain Services (managed domain services), as both involve Active Directory, but they serve entirely different purposes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure AD Connect
Azure AD Connect is the correct service because it is specifically designed to synchronize on-premises Active Directory identities with Azure Active Directory, enabling hybrid identity scenarios. It handles password hash synchronization, pass-through authentication, and federation integration, ensuring users have a single identity for both on-premises and cloud resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure AD Domain Services
Why it's wrong here
Azure AD Domain Services provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication without needing to deploy domain controllers. While it integrates with Azure AD, it is not a synchronization engine that copies on-premises AD identities into Azure AD. That role belongs exclusively to Azure AD Connect, which handles identity replication for hybrid environments.
- ✗
Azure AD B2C
Why it's wrong here
Azure AD B2C is a customer identity and access management service for external-facing applications, enabling consumers to sign in with social accounts or local credentials. It does not perform any directory synchronization with an on-premises Active Directory environment. Instead, Azure AD Connect is the specific tool designed for syncing on-premises directory identities to Azure AD for hybrid identity scenarios.
- ✓
Azure AD Connect
Why this is correct
Azure AD Connect is the dedicated Microsoft tool that synchronizes on-premises Active Directory user, group, and credential information with Azure AD, creating a unified hybrid identity. It supports multiple authentication options like password hash synchronization, pass-through authentication, and federation with AD FS. This synchronization is essential for enabling seamless single sign-on and consistent identity across on-premises and cloud resources.
- ✗
Azure Multi-Factor Authentication
Why it's wrong here
Azure Multi-Factor Authentication (MFA) adds an extra layer of security by requiring two or more verification forms, such as a password and a mobile app push, during sign-in. It does not replicate or transfer any directory objects from on-premises Active Directory to Azure AD. Therefore, MFA is an access control mechanism, not a directory synchronization tool, making it incorrect for the scenario described.
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Azure AD Connect
Azure AD Connect is a Microsoft tool that synchronizes on-premises Active Directory identities with Azure Active Directory for unified cloud and on-premises access.
Key term
Azure Active Directory
Azure Active Directory is Microsoft's cloud-based identity and access management service that lets employees sign in and access resources both in the cloud and on-premises.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.