Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 35 discussion

Actual exam question from Microsoft's MS-102

Question #: 35
Topic #: 1

HOTSPOT -
Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription.
The domain contains the users shown in the following table.

The domain contains the groups shown in the following table.

You are deploying Azure AD Connect.
You configure Domain and OU filtering as shown in the following exhibit.

You configure Filter users and devices as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by osxzvkwpfcfxobqjby at Aug. 10, 2023, 1:03 p.m.

Comments

Submit Cancel

Casticod

Highly Voted 1 year, 10 months ago

It should be No, No, No since group is Sales OU which does not synchronize When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included. (https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#group-based-filtering) https://www.examtopics.com/discussions/microsoft/view/82530-exam-ms-100-topic-3-question-89-discussion/

upvoted 38 times

WORKTRAIN

1 year, 8 months ago

You are right. There is some confusion in the general discussion. Let me explain this a bit different. OU1 contains user1, user2 and group2: in basic these are 'ready to sync'. But later in the wizard. Group-based filtering is used. Read it like this: from everything 'ready to sync' only the members of this group-based filter will actually be synced. The group-based filter contains group1. But group1 is not 'ready to sync'. Zero objects apply on the group-based filter. No objects are synced.

upvoted 15 times

...

mhmyz

Highly Voted 1 year, 9 months ago

N,N,N Group1 is not in OU1.So any groups and users does not sync. Group-based filtering When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-sync-configure-filtering

upvoted 10 times

...

pkumar1583

Most Recent 1 month ago

In Microsoft Entra ID, filtering policies generally take precedence over domain and OU filtering, though the specific order can depend on the type of filtering and the policies in place. So Y N N

upvoted 2 times

...

DikSoft

2 months, 2 weeks ago

Yes No Yes User1 as OU filtering AND Group membership User2 as OU filtering but NOT in sync Group Group2 as OU filtering AND Group membership

upvoted 1 times

...

EubertT

2 months, 2 weeks ago

✅ Statement Analysis: User1 syncs to Azure AD ✔️ Yes User1 is located in OU1, which is selected for sync. User2 syncs to Azure AD ✔️ Yes User2 is also in OU1, so will sync to Azure AD. Group2 syncs to Azure AD ✔️ Yes Group2 is in OU1, which is selected for sync. 🔴 Note: Even though Group2 is a member of Group1, and Group1 is in an OU not selected for sync, Group2 itself is in OU1. As a result, Group2 will sync, but Group1 will not. ✅ Final Answers: Statement Answer User1 syncs to Azure AD. ✅ Yes User2 syncs to Azure AD. ✅ Yes Group2 syncs to Azure AD. ✅ Yes

upvoted 1 times

...

APK1

10 months, 1 week ago

NNN is correct Sales OU is already included in filter but no member assigned to Sales OU

upvoted 1 times

...

arielreyes2712

10 months, 1 week ago

N N N The asnwer is here: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included.

upvoted 1 times

...

Baset100

11 months ago

yes, the filter users and devices setting synchronizes only members of Group1 in Sales. no, nested group memberships are not supported for synchronization yes, Group2 is in OU1, which is selected for synchronization.

upvoted 1 times

...

Tomtom11

1 year, 3 months ago

https://azurecloudai.blog/2019/10/20/field-notes-azure-active-directory-connect-domain-ou-and-group-filtering/

upvoted 1 times

...

Tomtom11

1 year, 3 months ago

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering

upvoted 1 times

...

Vaerox

1 year, 5 months ago

It's Y N Y. View 'Group1' as if it is a Security Group which just happens to be part of the Sales OU. Microsoft is trying to trick you here into believing your devices should be a member of the Sales OU. They are in fact member of OU1, therefore they will sync (except for the second statement).

upvoted 2 times

...

TP447

1 year, 7 months ago

This is a botched config. OU1 is in scope but the filter targets Sales OU. Nothing will sync unless it is a member of the Sales OU. None of User1, User2 or Group2 are in the Sales OU and therefore wont sync. N/N/N is the correct answer here but the configuration is ridiculous.

upvoted 2 times

...

NrdAlrt

1 year, 7 months ago

It is No No No. "When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included." https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering

upvoted 1 times

...

MondherBB

1 year, 9 months ago

I think the answer should be User1 Yes - The user is in OU1 and in Group1 (reply to both conditions) User2 No – the syn service will check in sales OU Group 2 No – Nested group

upvoted 8 times

ToutouPapa

6 months, 2 weeks ago

User1 Yes - It does not matter if Sales OU is selected or not in the previous page. This page is independant of the previous, and is meant to be used to select specific users/groups to be synced.

upvoted 3 times

...

vercracked_007

1 year, 9 months ago

YNY It doesn't matter Group1 is in the Sales OU. It's just used for the filter. OU1 syncs Based on filter User 1 will sync User2 to will Not sync Group 2 wil be synced because its a group in OU1 and nog a user or device. So filter does not affect the group.

upvoted 7 times

EEMS700

1 year, 9 months ago

YNY is correct. Only users, devices and groups in OU1 will sync, based on the filter (groupmembership) of group1 This was my fault in the past. the membership of a group who is a member of a filtergrup has no affect to the members inside the group. all devices, groups and users must be a member of the filtergroup itself. user1 is in ou1 and member of group1 -> sync user2 is in ou1 but no member of group1 -> no sync group1 is in sales and no member of group1 -> no sync group2 is in ou1 and member of group1 -> sync

upvoted 3 times

...

letters1234

1 year, 9 months ago

User 1 is member of Group 1 and in OU1, user/device filter applies for the user so allows sync User 2 is member of group 2 and in OU1, user/device filter doesnt inlcude user so doesnt sync Group 2 is in OU1, meaning it will sync, filter is for devices/users not groups. Y,N,Y The nesting comment is saying for the targeted group, if there are members of the group that are security groups, they will be ignored. The filter is for Users/Devices.

upvoted 1 times

...

Nandokun01

1 year, 10 months ago

OU filters define the connector scope and are an include/exclude conditional statement. Group-based filtering is an object-level condition which evaluates during each connector's sync cycle. If the OU is not in scope the object will never import via its connector so it will not be evaluated during the sync cycles. Casticod is correct

upvoted 2 times

...

Load full discussion...