Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a hybrid configuration of Azure Active Directory (Azure AD).

You have an Azure HDInsight cluster on a virtual network.

You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials.

You need to configure the environment to support the planned authentication.

Solution: You create a site-to-site VPN between the virtual network and the on-premises network.

Does this meet the goal?
A . Yes
B . No

View Answer

Answer: A

Explanation:

You can connect HDInsight to your on-premises network by using Azure Virtual Networks and a VPN gateway.

Note: To allow HDInsight and resources in the joined network to communicate by name, you must perform the following actions:

– Create Azure Virtual Network.

– Create a custom DNS server in the Azure Virtual Network.

– Configure the virtual network to use the custom DNS server instead of the default Azure Recursive Resolver.

– Configure forwarding between the custom DNS server and your on-premises DNS server.

References:

https://docs.microsoft.com/en-us/azure/hdinsight/connect-on-premises-network