Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a hybrid configuration of Azure Active Directory (Azure AD).
You have an Azure HDInsight cluster on a virtual network.
You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials.
You need to configure the environment to support the planned authentication.
Solution: You deploy an Azure AD Application Proxy.
Does this meet the goal?
Click on the arrows to vote for the correct answer
A. B.B
Instead, you connect HDInsight to your on-premises network by using Azure Virtual Networks and a VPN gateway.
Note: To allow HDInsight and resources in the joined network to communicate by name, you must perform the following actions:
-> Create Azure Virtual Network.
-> Create a custom DNS server in the Azure Virtual Network.
-> Configure the virtual network to use the custom DNS server instead of the default Azure Recursive Resolver.
-> Configure forwarding between the custom DNS server and your on-premises DNS server.
https://docs.microsoft.com/en-us/azure/hdinsight/connect-on-premises-networkThe proposed solution of deploying an Azure AD Application Proxy does not meet the goal of allowing users to authenticate to the Azure HDInsight cluster by using their on-premises Active Directory credentials.
Azure AD Application Proxy is a service that enables remote access to web applications that are hosted on-premises, allowing users to access those applications from anywhere with internet connectivity. However, it does not provide the ability to authenticate users against an on-premises Active Directory.
To enable authentication for Azure HDInsight cluster with on-premises Active Directory, you need to set up a hybrid identity solution that extends your on-premises Active Directory to the cloud. This can be achieved through Azure AD Connect, which synchronizes the on-premises Active Directory to Azure AD. Once the synchronization is complete, users can use their on-premises Active Directory credentials to authenticate to the Azure HDInsight cluster.
To configure Azure HDInsight to use Azure AD Connect, you need to perform the following steps:
Once these steps are completed, users can authenticate to the Azure HDInsight cluster by using their on-premises Active Directory credentials.