Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 50 discussion

Actual exam question from Microsoft's MS-102

Question #: 50
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain.
You deploy an Azure AD tenant.
Another administrator configures the domain to synchronize to Azure AD.
You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.
You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.
You need to ensure that the 10 user accounts are synchronized to Azure AD.
Solution: From the Synchronization Rules Editor, you create a new outbound synchronization rule.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by osxzvkwpfcfxobqjby at Aug. 11, 2023, 5:19 a.m.

Comments

Submit Cancel

Anonymous121011

Highly Voted 1 year, 2 months ago

No, this solution does not meet the goal. Creating a new outbound synchronization rule in the Synchronization Rules Editor will not solve the issue of the 10 user accounts not being synchronized to Azure AD. Outbound synchronization rules define what happens after Azure AD Connect has combined the data from all connected directories. They don’t control which objects are being synchronized to Azure AD. The issue seems to be with the scope of the objects that are being synchronized. It’s possible that the OU containing these 10 users is not included in the synchronization scope. To solve this issue, you should check the configuration of Azure AD Connect and ensure that the OU containing these 10 users is included in the synchronization scope.

upvoted 22 times

...

sherifhamed

Highly Voted 1 year, 4 months ago

Selected Answer: B

Suggested Answer: B 🗳️ The question states that ג€all the user account synchronizations completed successfullyג€. Therefore, the synchronization rule is configured correctly. It is likely that the 10 user accounts are being excluded from the synchronization cycle by a filtering rule. Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering ------- Review: https://www.examtopics.com/discussions/microsoft/view/10379-exam-ms-100-topic-3-question-16-discussion/

upvoted 8 times

...

feaf0a7

Most Recent 2 weeks, 3 days ago

Selected Answer: B

In the Synchronization Manager, you can find missing objects in the Connector Spaces. Missing objects are usually caused by domain-based or OU-based filtering, which is prior to rules being applied. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/tshoot-connect-object-not-syncing

upvoted 1 times

...

e201546

8 months ago

Selected Answer: B

The OU can't be added via Sync Rules

upvoted 1 times

...

692a0df

1 year ago

Selected Answer: A

I think its A. Its not related to OU selection/filtering as AAD Connect health says it has synced ALL user accounts BUT these 10 are not appearing in Azure AD. So the accounts are making the initial sync from the OnPrem AD into the Meta zone (AAD Connect). Rules then apply and if the rule conditions are met - then the sync from the Meta to Azure AD will complete. So it's feasible that a rule is causing the problem. Why not impact the other accounts. Maybe these accounts are missing specific attribs from their OnPrem AD that the current rule needs to push the sync. Saying all that... it could potentially be something else. Maybe stale / relic objects in Azure AD that match attribs from these 10 accounts. So its A for me but only a 70% A.

upvoted 2 times

...

Abhishek1610

1 year ago

Selected Answer: B

From Azure AD Connect, you modify the filtering settings

upvoted 5 times

...

cpaljchc4

1 year ago

Selected Answer: B

https://www.examtopics.com/discussions/microsoft/view/10379-exam-ms-100-topic-3-question-16-discussion/

upvoted 3 times

...

m2L

1 year, 1 month ago

Hello Guys, The Answer is no doubt A because making OU Filtering is a way to use Sync Rule Editor. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fix-default-rules?source=recommendations

upvoted 2 times

...

Nyamnyam

1 year, 2 months ago

Selected Answer: B

This is a clear OU filtering question.

upvoted 3 times

...

benpatto

1 year, 2 months ago

No, you require OU filtering. This will then allow the OU that has the 10users to sync to Azure AD

upvoted 1 times

...

daye

1 year, 2 months ago

Selected Answer: B

No, It does not meet the goal since you don't any evidence. As other guy said, firstly you should review the OU filtering or do some extra troubleshooting to identify the root cause.

upvoted 3 times

...

NrdAlrt

1 year, 2 months ago

Selected Answer: B

It states everyone is syncing fine except a single OU. That's selecting the OU as part of setting up AADC's scope which is not the same as changing an outbound synchronization rule. To be more specific using IDM language, that scope effects AADC's ability to import/see those accounts before it exports them to Entra/AAD.

upvoted 3 times

...

santi32

1 year, 4 months ago

Selected Answer: B

No, this solution doesn't necessarily meet the goal. If the 10 user accounts in an OU are not being synchronized to Azure AD, it's more likely an issue with the scope of the synchronization (i.e., which OUs are selected for synchronization) rather than a need for a new outbound synchronization rule. To resolve the issue, you'd typically: Open the Azure AD Connect tool on the server where it's installed. Check the configuration to see which OUs are selected for synchronization. Ensure the OU containing the 10 user accounts is selected for synchronization. Creating a new outbound synchronization rule without addressing the potential OU filtering issue would not guarantee synchronization of those 10 user accounts.

upvoted 5 times

...

RJTW070

1 year, 5 months ago

Selected Answer: A

Yes, creating a new outbound synchronization rule from the Synchronization Rules Editor could potentially solve the issue1. However, you need to be careful while creating the rule and ensure that it correctly targets the 10 user accounts in the specific Organizational Unit (OU) that are not being synchronized2. Also, any changes to synchronization rules should be done by an advanced user as incorrect changes may result in deletion of objects from your target directory

upvoted 1 times

imlearningstuffagain

1 year, 3 months ago

the rules editor is not the same as the ad Connect configuration. If sync is running OK for all others, there can be a filtering issue, but that is not changed in the rusles editor. YOu can compair this to renaming the domain it your AAD domain is not the same, sure it will work. However a upn suffix will do the trick and is much easier.

upvoted 1 times

...

letters1234

1 year, 5 months ago

Selected Answer: A

Other two answers for this group are definitely no, this one is yes as the OU may be excluded or not part of what was setup to sync.

upvoted 1 times

imlearningstuffagain

1 year, 3 months ago

The rules editor is not the same as the ad configuration.

upvoted 1 times

...

Greatone1

1 year, 5 months ago

Selected Answer: A

Correct answer should be yes

upvoted 2 times

...

osxzvkwpfcfxobqjby

1 year, 5 months ago

Selected Answer: A

The other administrator has forgotten/meshedup a rule so you have to create an extra one. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-create-custom-sync-rule

upvoted 1 times

...