Question 19 of 88 from exam SC-300: Microsoft Identity and Access Administrator

Question 19 of 88 from exam SC-300: Microsoft Identity and Access Administrator

Question

HOTSPOT - Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the objects shown in the following table.

Name Type In organizational Description
unit (OU)

Usert__| User Out Usert is a member of Group1

User2_ | User Out User2 is not a member of any
groups

Group [Security group | OU2 User and Group2 are members
of Group

Group2 [Security group _[ OUt Group2 is a member of Groupt

You install Azure AD Connect.

You configure the Domain and OU filtering settings as shown in the Domain and OU Filtering exhibit.

(Click the Domain and OU Filtering tab.)

Tasks
Connected to Azure AD
Syne

Connect Directories

Filtering
Optional Features
Configure

Domain and OU filtering

If you change the OU-filtering configuration for a given directory, the next sync cycle will automatically
perform full import on the directory.

‘Sync all domains and OUs
® sync selected domains and OUs

4 Gi contoso.com

Builtin
Computers
Domain Controllers
ForeignSecurityPrincipals
Infrastructure
LostandFound
Managed Service Accounts

¥I our

I ovz
Program Data
system
Users

Next

You configure the Filter users and devices settings as shown in the Filter Users and Devices exhibit.

(Click the Filter Users and Devices tab.)

Microsoft A;

Tasks
Connected to Azure AD
Syne

Connect Directories

Domain/OU Filtering

Fi

Optional Features

ri

Configure

ctory Connect

Filter users and devices

For a pilot deployment, specify a group containing your users and devices that will be synchronzied, Nested

groups are not supported and will be ignored,

© ‘Synchronize all users and devices
® Synchronize selected @
FOREST GROUP

contoso.com CN=Group1,OU=OU2,DC=contoso,DC=com

Resolve o

Next

For each of the following statements, select Yes if the statement is true.

Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Answer Area
Statements
User1 syncs to Azure AD.

User2 syncs to Azure AD.

Group2 syncs to Azure AD.

Explanations

Answer Area
Statements
User1 syncs to Azure AD.

User2 syncs to Azure AD.

Group2 syncs to Azure AD.

Yes

io

Only direct members of Group1 are synced.Group2 will sync as it is a direct member of Group1 but the members of Group2 will not sync.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom