What should you include in the identity management strategy to support the planned changes?
Options:
A.
Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.
B.
Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.
C.
Deploy a new Azure AD tenant for the authentication of new R & D projects.
D.
Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.
Answer:
B
Explanation:
Directory synchronization between Azure Active Directory (Azure AD) and corp.fabrikam.com must not be affected by a link failure between Azure and the on-premises network. (This requires domain controllers in Azure)
Users on the on-premises network must be able to authenticate to corp.fabrikam.com if an Internet link fails. (This requires domain controllers on-premises)