Your application that was moved from on-premises to Azure Virtual machine needs to be able to query Active Directory using LDAP without accessing on-premises network. How will you achieve this goal?