Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?
Click on the arrows to vote for the correct answer
A. B. C. D.B
To migrate to Azure and decommission the on-premises data center, you would need to create the 5,000 user accounts in Azure Active Directory. The easy way to do this is to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). You can even sync their passwords to further minimize the impact on users.
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that are related to synchronize identity data between your on-premises environment and
Azure AD.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatisThe best option to minimize the impact on users after the planned migration to Azure is to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). This option will allow users to continue using their existing credentials to access network resources without interruption.
Here is a more detailed explanation of each answer option:
A. Implement Azure Multi-Factor Authentication (MFA) Azure Multi-Factor Authentication (MFA) is a security feature that requires users to provide two or more authentication factors to access network resources. While MFA is a useful security feature, it is not directly related to minimizing the impact on users during a migration. Furthermore, implementing MFA would likely cause some disruption for users who are accustomed to using only a username and password to access network resources.
B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) Syncing all the Active Directory user accounts to Azure Active Directory (Azure AD) is the best option to minimize the impact on users after the planned migration. This option will ensure that users can continue to use their existing credentials to access network resources without interruption. Additionally, syncing the user accounts to Azure AD will allow for a smoother migration process and will ensure that all user accounts are available in Azure AD after the migration is complete.
C. Instruct all users to change their password Instructing all users to change their password is not a good option to minimize the impact on users during a migration. While changing passwords is a good security practice, it will likely cause some disruption for users who are accustomed to using their existing credentials to access network resources. Additionally, changing passwords for 5,000 users can be a time-consuming and complex process.
D. Create a guest user account in Azure Active Directory (Azure AD) for each user Creating a guest user account in Azure Active Directory (Azure AD) for each user is not a good option to minimize the impact on users during a migration. Guest user accounts are typically used for external users who need temporary access to network resources. Creating a guest user account for each user would require users to use a new set of credentials to access network resources, which would likely cause some disruption for users.
To create a new Azure virtual machine (VM) from an Android tablet, you can use one of the following three options:
A. Use Bash in Azure Cloud Shell: Azure Cloud Shell provides an interactive web-based shell environment that enables you to manage your Azure resources from virtually anywhere, using a browser or the Azure mobile app. You can access Cloud Shell using an Android tablet and use the Bash shell to run Azure CLI commands to create a new virtual machine. Cloud Shell also provides access to common tools and languages, such as Git, Node.js, Python, and Ruby, making it easy to work with your Azure resources. This solution requires an Azure subscription and an internet connection.
B. Use PowerShell in Azure Cloud Shell: Similar to option A, you can use Azure Cloud Shell to access a PowerShell shell environment and run PowerShell commands to create a new virtual machine. PowerShell is a powerful automation tool that can be used to manage Azure resources, including virtual machines, storage accounts, and networks. This solution also requires an Azure subscription and an internet connection.
E. Use the Azure portal: The Azure portal is a web-based interface that provides a unified view of all your Azure resources and services. You can access the portal using an Android tablet and use the intuitive user interface to create a new virtual machine. You can choose from a range of preconfigured templates, such as Ubuntu, Windows Server, and SQL Server, or create a custom virtual machine. This solution requires an Azure subscription and an internet connection.
C. Use the PowerApps portal and D. Use the Security & Compliance admin center are not valid options to create a new virtual machine. The PowerApps portal is a low-code development platform for building business applications, while the Security & Compliance admin center is used for managing security and compliance policies for Azure resources. Neither of these options provides a way to create a virtual machine.
In summary, to create a new Azure virtual machine from an Android tablet, you can use either Bash or PowerShell in Azure Cloud Shell or the Azure portal.