お客様のネットワークには、オンプレミスのActive Directoryドメインサービス(AD DS)ドメインが含まれています。このドメインには2,000個のユーザーアカウントが存在します。
お客様はMicrosoft Entraテナントをお持ちです。
ドメインをMicrosoft Entraテナントと同期する必要があります。ソリューションは以下の要件を満たす必要があります。
インフラ要件を最小限に抑える。
・単一障害点を最小限に抑える。
管理業務の手間を最小限に抑える。
何を使うべきでしょうか?
正解:B
Microsoft Entra Cloud Sync is the correct choice because the requirement is directory synchronization with the least infrastructure, least administrative overhead, and reduced single points of failure. Microsoft describes Entra Cloud Sync as a cloud-managed hybrid identity synchronization service for synchronizing users, groups, and contacts between Active Directory and Microsoft Entra ID, using a lightweight agent-based model. Microsoft also positions Cloud Sync as its strategic direction for hybrid identity synchronization.
For resilience, Cloud Sync supports multiple active provisioning agents. Microsoft states that high availability is achieved by having multiple active agents installed and running, so synchronization can continue if one agent fails, and Microsoft recommends three active agents for high availability. This directly satisfies
"minimize single points of failure."
Microsoft Entra Connect Sync can synchronize AD DS to Entra ID, but it requires a more substantial dedicated synchronization server design and more operational management. Microsoft's migration guidance notes that Cloud Sync's lightweight provisioning agent model requires minimal server resources compared with Connect Sync's fuller installation. AD FS and pass-through authentication are authentication/sign-in solutions, not the best answer for directory synchronization. References/topics: Microsoft Entra Cloud Sync, hybrid identity synchronization, provisioning agents, high availability, Microsoft Entra Connect comparison.