MS-102 Exam - Question 86

Question

HOTSPOT -Your network contains an Active Directory domain named fabrikam. com. The domain contains the objects shown in the following table. The groups have the members shown in the following table. You are configuring synchronization between fabrikam. com and an Azure AD tenant. You configure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit (Click the Domain/OU Filtering tab. )You configure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit. (Click the Filtering tab. )For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Examice · Accepted Answer

.

Greatone1 · Answer

Answers are correct
User 2 is not synced because it's not in an OU that is synced.
User 3 is synced because it is in both a synced OU and Group.

ATHOOS · Answer

Group2 will not be synchronized...
NNY

lt2673 · Answer

So many wrong comments ...
Filtering is enabled so only members of Group2 will be synced. Group2 cannot be a member of itself. Group2 will not be synced (even if it is in OU2)

amurp35 · Answer

Answers are correct. The filtered group's members are only synced if they also reside in an OU that is also chosen to be synced by the directory options prior.

benpatto · Answer

Answers are correct, if a user or group has been assigned directly to an OU, they will sync. If they're only nested within a group that is in that OU, the main user account or group will be hiding away somewhere different in the AD Forest so will not sync.

Festus365 · Answer

{Group2 and User3 belong to OU2 initially}. NYY is correct

nsotis28 · Answer

Answers are correct

Tomtom11 · Answer

https://azurecloudai.blog/2019/10/20/field-notes-azure-active-directory-connect-domain-ou-and-group-filtering/

rcristiano · Answer

YNY. A filtragem esta abilitada portanto somente membros do GRUPO 2 serão sincronizados. GRUPO 2  nao sincroniza porque não pode ser membro de si mesmo.

004b54b · Answer

NNY : https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-install-custom#sync-filtering-based-on-groups Sync filtering based on groups: All objects that you want to synchronize must be direct members of the group. Users, groups, contacts, and computers or devices must all be direct members. Nested group membership isn't resolved. When you add a group as a member, only the group itself is added. Its members aren't added. 1st step, OU filtering every object not on OU1 won't be synced (User1, User2 and Group1 are >>excluded>may<< be included). 2nd step: group filtering : only direct members will be synced = only User2, User3 and Group1) Sum: only User 3 go through the 2 filters and is synced, so No - No - Yes

EubertT · Answer

1. User2 will synchronize to Azure AD.
✅ Yes

User2 is a direct member of Group2, and Group2 is within OU2 (which is selected for sync).

Therefore, User2 meets both OU and group filtering criteria.

2. Group2 will synchronize to Azure AD.
✅ Yes

Group2 is located in OU2, which is selected.

Group2 is also the filtering group itself and will be synchronized.

3. User3 will synchronize to Azure AD.
✅ Yes

User3 is directly listed as a member of Group2 and resides in OU2.

Therefore, User3 will be synchronized.

✅ Final Answers:
User2 will synchronize to Azure AD: ✅ Yes

Group2 will synchronize to Azure AD: ✅ Yes

User3 will synchronize to Azure AD: ✅ Yes

_________________________________________________________

MS-102 Exam - Question 86

Discussion