Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a hybrid configuration of Azure Active Directory (Azure AD).
You have an Azure HDInsight cluster on a virtual network.
You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials.
You need to configure the environment to support the planned authentication.
Solution: You create a site-to-site VPN between the virtual network and the on-premises network.
Does this meet the goal?
Click on the arrows to vote for the correct answer
A. B.A
You can connect HDInsight to your on-premises network by using Azure Virtual Networks and a VPN gateway.
Note: To allow HDInsight and resources in the joined network to communicate by name, you must perform the following actions:
-> Create Azure Virtual Network.
-> Create a custom DNS server in the Azure Virtual Network.
-> Configure the virtual network to use the custom DNS server instead of the default Azure Recursive Resolver.
-> Configure forwarding between the custom DNS server and your on-premises DNS server.
https://docs.microsoft.com/en-us/azure/hdinsight/connect-on-premises-networkThe solution provided in the scenario will allow the HDInsight cluster to be accessed through a site-to-site VPN connection between the Azure virtual network and the on-premises network. However, this solution alone does not fully meet the goal of allowing users to authenticate to the cluster by using their on-premises Active Directory credentials.
To enable on-premises Active Directory authentication for the Azure HDInsight cluster, you need to set up the necessary integration between Azure AD and on-premises Active Directory. This can be achieved through Azure AD Connect, which is a Microsoft tool that enables synchronization of identities between Azure AD and on-premises AD.
To configure Azure AD Connect, you need to install it on a server in your on-premises environment and configure it to synchronize identities between the two environments. You can then enable Azure AD Domain Services in your Azure environment to provide a domain controller and LDAP services in Azure for authentication purposes.
Once Azure AD Domain Services is enabled, you can configure the HDInsight cluster to use Azure AD Domain Services for authentication by specifying the domain name in the cluster's configuration settings. This will allow users to authenticate to the HDInsight cluster using their on-premises AD credentials.
Therefore, the solution provided in the scenario alone (creating a site-to-site VPN) is not sufficient to meet the goal of allowing on-premises AD authentication for the Azure HDInsight cluster. The correct answer is "B. No".