Exam AZ-900 topic 1 question 274 discussion

Excellent Explaination

thank you.

https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/2-directory-services If you had an on-premises environment running Active Directory and a cloud deployment using Azure AD, you would need to maintain two identity sets. However, you can connect Active Directory with Azure AD, enabling a consistent identity experience between cloud and on-premises. One method of connecting Azure AD with your on-premises AD is using Azure AD Connect. Azure AD Connect synchronizes user identities between on-premises Active Directory and Azure AD. Azure AD Connect synchronizes changes between both identity systems, so you can use features like SSO, multifactor authentication, and self-service password reset under both systems.

Synchronizing all the Active Directory user accounts to Azure Active Directory (Azure AD) can minimize the impact on users after the planned migration as it ensures that all the same user accounts exist in both the on-premises environment and the Azure environment, so users don't have to remember different usernames and passwords. This allows users to continue using the same credentials they've been using before the migration, which reduces friction and support requirements.

If you have LDAP "tree", you can also have "forest" :D