ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam
Go to Exam

Exam MS-102 topic 1 question 35 discussion

Actual exam question from Microsoft's MS-102
Question #: 35
Topic #: 1
[All MS-102 Questions]

HOTSPOT -
Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription.
The domain contains the users shown in the following table.

The domain contains the groups shown in the following table.

You are deploying Azure AD Connect.
You configure Domain and OU filtering as shown in the following exhibit.

You configure Filter users and devices as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by osxzvkwpfcfxobqjby at Aug. 10, 2023, 1:03 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Casticod
Highly Voted 1 year, 8 months ago
It should be No, No, No since group is Sales OU which does not synchronize When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included. (https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#group-based-filtering) https://www.examtopics.com/discussions/microsoft/view/82530-exam-ms-100-topic-3-question-89-discussion/
upvoted 37 times
WORKTRAIN
1 year, 6 months ago
You are right. There is some confusion in the general discussion. Let me explain this a bit different. OU1 contains user1, user2 and group2: in basic these are 'ready to sync'. But later in the wizard. Group-based filtering is used. Read it like this: from everything 'ready to sync' only the members of this group-based filter will actually be synced. The group-based filter contains group1. But group1 is not 'ready to sync'. Zero objects apply on the group-based filter. No objects are synced.
upvoted 14 times
...
...
mhmyz
Highly Voted 1 year, 7 months ago
N,N,N Group1 is not in OU1.So any groups and users does not sync. Group-based filtering When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-sync-configure-filtering
upvoted 9 times
...
DikSoft
Most Recent 3 weeks, 6 days ago
Yes No Yes User1 as OU filtering AND Group membership User2 as OU filtering but NOT in sync Group Group2 as OU filtering AND Group membership
upvoted 1 times
...
EubertT
3 weeks, 6 days ago
✅ Statement Analysis: User1 syncs to Azure AD ✔️ Yes User1 is located in OU1, which is selected for sync. User2 syncs to Azure AD ✔️ Yes User2 is also in OU1, so will sync to Azure AD. Group2 syncs to Azure AD ✔️ Yes Group2 is in OU1, which is selected for sync. 🔴 Note: Even though Group2 is a member of Group1, and Group1 is in an OU not selected for sync, Group2 itself is in OU1. As a result, Group2 will sync, but Group1 will not. ✅ Final Answers: Statement Answer User1 syncs to Azure AD. ✅ Yes User2 syncs to Azure AD. ✅ Yes Group2 syncs to Azure AD. ✅ Yes
upvoted 1 times
...
APK1
8 months, 2 weeks ago
NNN is correct Sales OU is already included in filter but no member assigned to Sales OU
upvoted 1 times
...
arielreyes2712
8 months, 3 weeks ago
N N N The asnwer is here: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included.
upvoted 1 times
...
Baset100
9 months, 1 week ago
yes, the filter users and devices setting synchronizes only members of Group1 in Sales. no, nested group memberships are not supported for synchronization yes, Group2 is in OU1, which is selected for synchronization.
upvoted 1 times
...
Tomtom11
1 year, 1 month ago
https://azurecloudai.blog/2019/10/20/field-notes-azure-active-directory-connect-domain-ou-and-group-filtering/
upvoted 1 times
...
Tomtom11
1 year, 1 month ago
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering
upvoted 1 times
...
Vaerox
1 year, 3 months ago
It's Y N Y. View 'Group1' as if it is a Security Group which just happens to be part of the Sales OU. Microsoft is trying to trick you here into believing your devices should be a member of the Sales OU. They are in fact member of OU1, therefore they will sync (except for the second statement).
upvoted 2 times
...
TP447
1 year, 5 months ago
This is a botched config. OU1 is in scope but the filter targets Sales OU. Nothing will sync unless it is a member of the Sales OU. None of User1, User2 or Group2 are in the Sales OU and therefore wont sync. N/N/N is the correct answer here but the configuration is ridiculous.
upvoted 2 times
...
NrdAlrt
1 year, 6 months ago
It is No No No. "When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included." https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering#group-based-filtering
upvoted 1 times
...
MondherBB
1 year, 7 months ago
I think the answer should be User1 Yes - The user is in OU1 and in Group1 (reply to both conditions) User2 No – the syn service will check in sales OU Group 2 No – Nested group
upvoted 8 times
ToutouPapa
4 months, 4 weeks ago
User1 Yes - It does not matter if Sales OU is selected or not in the previous page. This page is independant of the previous, and is meant to be used to select specific users/groups to be synced.
upvoted 3 times
...
...
vercracked_007
1 year, 7 months ago
YNY It doesn't matter Group1 is in the Sales OU. It's just used for the filter. OU1 syncs Based on filter User 1 will sync User2 to will Not sync Group 2 wil be synced because its a group in OU1 and nog a user or device. So filter does not affect the group.
upvoted 7 times
EEMS700
1 year, 7 months ago
YNY is correct. Only users, devices and groups in OU1 will sync, based on the filter (groupmembership) of group1 This was my fault in the past. the membership of a group who is a member of a filtergrup has no affect to the members inside the group. all devices, groups and users must be a member of the filtergroup itself. user1 is in ou1 and member of group1 -> sync user2 is in ou1 but no member of group1 -> no sync group1 is in sales and no member of group1 -> no sync group2 is in ou1 and member of group1 -> sync
upvoted 3 times
...
...
letters1234
1 year, 8 months ago
User 1 is member of Group 1 and in OU1, user/device filter applies for the user so allows sync User 2 is member of group 2 and in OU1, user/device filter doesnt inlcude user so doesnt sync Group 2 is in OU1, meaning it will sync, filter is for devices/users not groups. Y,N,Y The nesting comment is saying for the targeted group, if there are members of the group that are security groups, they will be ignored. The filter is for Users/Devices.
upvoted 1 times
...
Nandokun01
1 year, 8 months ago
OU filters define the connector scope and are an include/exclude conditional statement. Group-based filtering is an object-level condition which evaluates during each connector's sync cycle. If the OU is not in scope the object will never import via its connector so it will not be evaluated during the sync cycles. Casticod is correct
upvoted 2 times
...
Greatone1
1 year, 8 months ago
No sure answer from previous exam question https://www.examtopics.com/discussions/microsoft/view/82530-exam-ms-100-topic-3-question-89-discussion/
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago