What is a true statement regarding the configuration of an Azure Domain Controller?

• A. It must be set as a read-only domain controller
• B. It does not need to be configured for global catalog
• C. It should configure as a GC server
• D. It should not be connected to the internet

Answer: (C)

A true statement regarding the configuration of an Azure Domain Controller is that it should be configured as a Global Catalog (GC) server.

A Global Catalog server plays a crucial role in a multi-domain forest. It contains a partial replica of every object in the Active Directory Domain Services (AD DS) forest, which allows for efficient searching across all domains and improves the performance of authentication and resource access across the organization. By having the Azure Domain Controller configured as a GC server, it enables quicker access to information about users and resources, which is particularly beneficial for applications that perform searches or need to authenticate users from multiple domains.

In scenarios where efficient querying and faster logon times are essential, having a Global Catalog server is a best practice. This is especially important in cloud environments like Azure, where organizations might have a distributed architecture with multiple domains and users accessing resources from various locations.