Designing and Implementing Azure for AWS Professionals — Question 5

A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance.
Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You verify the user accounts exist in Azure AD DS.
You need to resolve the issue.
What should you do?

Answer options

• A. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.
• B. Instruct the users to change their password in Azure AD.
• C. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.
• D. Deploy Azure AD Connect.

Correct answer: B

Explanation

The correct answer is B because users must change their passwords in Azure AD to successfully authenticate to Azure AD DS. The other options either do not address the password issue directly or involve unnecessary steps that do not resolve the sign-in problem.