AZ-303 Exam - Question 25

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage an Active Directory domain named contoso.local.

You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.

You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.

Solution: You use Azure AD Connect to customize the synchronization options.

Does this meet the goal?

Examice · Accepted Answer

To ensure that only users with a UPN suffix of contoso.com in the contoso.local domain are synced to Azure AD, using the Synchronization Rules Editor is the correct approach. Azure AD Connect customization alone does not allow for such specific attribute-based filtering. The Synchronization Rules Editor enables the creation and management of rules that filter users based on their UPN suffix, ensuring that only the desired users are synchronized to Azure AD.

kcinofni · Answer

Correct B:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#outbound-filtering

buanilk · Answer

In AD connect one can only select the OU to be sync and for the UPN selection one has to do in sync editor.

andyR · Answer

Answer A

JasonYin · Answer

Answer should be A/Yes
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#configure-attribute-based-filtering
To set the domain filter, do the following steps:
Start the Azure AD Connect wizard
Click Configure.
Select Customize Synchronization Options and click Next.
Enter your Azure AD credentials
On the Connected Directories screen click Next.
On the Domain and OU filtering page click Refresh. New domains will now appear and deleted domains will disappear.

ihustle · Answer

Answer is A

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#configure-attribute-based-filtering

mtk93 · Answer

B - the given answer are correct. you need the rule editor. Watch next question.

Sumbasa · Answer

Answer B - I understand when someone chose A, but in this case we already installed AD Connect, so if I would be the admin I would choose the Synch. Rules Editor instead of going through the wizard again.

satbim · Answer

Based on the reading, it can be achieved using AD connect or synchronisation rule editor but with AD connect, u need to run the installation wizard again. I would prefer to go with B keeping this in mind.

pgx7 · Answer

Correct is B : you need to use Synchronization Rules Editor - Some guys says that A is correct because you could configure Domain-based filtering using Sync service configuration : while that is true, this is not what is asked in this question - It is not asked  to filter a Domain (Child domains for exemple in a forest) but to filter from a Specfic UPN in a domain - And the only supported way to do that is to configure synchonization Rules (add new ones, don't modify default ones)

Ace786 · Answer

sorry upvoted by mistake, you need the sync rules editor

sejalo · Answer

Answer should be B
If you refer Positive filtering: "only sync these" under this url, it is stated clearly that Sync Rule edition is required.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#configure-attribute-based-filtering

Krsto · Answer

By default, all domains and organizational units (OUs) are synchronized. If you don't want to synchronize some domains or OUs to Azure AD, you can clear the appropriate selections.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#domain-and-ou-filtering
So the answer is A

Mucker973 · Answer

very misleading question, is this on an exam anywhere exactly worded the same? In my mind the "Azure AD connect" in the context of this question is the same thing as the "rules editor". I knew it was there were you do it, I just thought the question when that GUI when they said "azure AD connect"

NAWEN · Answer

Answer A, https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#configure-attribute-based-filtering

The preferred way to change domain-based filtering is by running the installation wizard and changing domain and OU filtering. The installation wizard automates all the tasks

moumugdha · Answer

According to me it will be A.

Mucker973 · Answer

very misleading question, is this on an exam anywhere exactly worded the same? In my mind the "Azure AD connect" in the context of this question is the same thing as the "rules editor". I knew it was there were you do it, I just thought the question when that GUI when they said "azure AD connect"

MinhajR · Answer

On Exam 27/08/2021

asdyxc · Answer

Found another compelling argument for answer A:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized

Amit3 · Answer

On Exam 11-Jun-21, Answer is B.

tita_tovenaar · Answer

sorry, correct A:
“ There are two ways to select the domains to be synchronized: - Using the Synchronization Service - Using the Azure AD Connect wizard.”
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#outbound-filtering

syu31svc · Answer

I will go for A

In Azure AD Connect sync, you can enable filtering at any time. By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-premises directory.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#attribute-based-filtering

plmmsg · Answer

No. use Synchronization Rules Editor

KemalM · Answer

use Synchronization Rules Editor

AZ-303 Exam - Question 25

Discussion