Minimize Impact on Users After Azure Migration | Exam AZ-900 Solution

Minimize Impact on Users After Azure Migration

Prev Question Next Question

Question

Your network contains an Active Directory forest. The forest contains 5,000 user accounts.

Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.

You need to recommend a solution to minimize the impact on users after the planned migration.

What should you recommend?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

To migrate to Azure and decommission the on-premises data center, you would need to create the 5,000 user accounts in Azure Active Directory. The easy way to do this is to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). You can even sync their passwords to further minimize the impact on users.

The tool you would use to sync the accounts is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that are related to synchronize identity data between your on-premises environment and

Azure AD.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

The recommended solution to minimize the impact on users after the planned migration of all network resources to Azure and decommissioning the on-premises data center is to sync all the Active Directory user accounts to Azure Active Directory (Azure AD).

Explanation:

Option A: Implement Azure Multi-Factor Authentication (MFA) While Azure Multi-Factor Authentication (MFA) provides an additional layer of security to user accounts, it does not minimize the impact on users after the planned migration. Users will still need to access their accounts and resources in Azure and will require authentication, which can cause disruption during the transition.

Option B: Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) Syncing all Active Directory user accounts to Azure AD is the recommended solution as it allows users to access their accounts and resources in Azure with their existing credentials. This solution provides a seamless transition for users, minimizing any potential impact or disruption. The Azure AD Connect tool can be used to sync on-premises Active Directory with Azure AD.

Option C: Instruct all users to change their password Instructing all users to change their password is not an effective solution to minimize the impact on users after the planned migration. Users may struggle to remember their new passwords and this can cause disruption to their workflow.

Option D: Create a guest user account in Azure Active Directory (Azure AD) for each user Creating a guest user account in Azure AD for each user is not an effective solution to minimize the impact on users after the planned migration. Guest accounts are intended for external users who require access to a limited set of resources in Azure AD. It is not suitable for migrating user accounts and their associated resources to Azure.