Exam MS-102 topic 1 question 86 discussion

Answers are correct User 2 is not synced because it's not in an OU that is synced. User 3 is synced because it is in both a synced OU and Group.

Group2 will not be synchronized... NNY

1. User2 will synchronize to Azure AD. ✅ Yes User2 is a direct member of Group2, and Group2 is within OU2 (which is selected for sync). Therefore, User2 meets both OU and group filtering criteria. 2. Group2 will synchronize to Azure AD. ✅ Yes Group2 is located in OU2, which is selected. Group2 is also the filtering group itself and will be synchronized. 3. User3 will synchronize to Azure AD. ✅ Yes User3 is directly listed as a member of Group2 and resides in OU2. Therefore, User3 will be synchronized. ✅ Final Answers: User2 will synchronize to Azure AD: ✅ Yes Group2 will synchronize to Azure AD: ✅ Yes User3 will synchronize to Azure AD: ✅ Yes _________________________________________________________

NNY : https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-install-custom#sync-filtering-based-on-groups Sync filtering based on groups: All objects that you want to synchronize must be direct members of the group. Users, groups, contacts, and computers or devices must all be direct members. Nested group membership isn't resolved. When you add a group as a member, only the group itself is added. Its members aren't added. 1st step, OU filtering every object not on OU1 won't be synced (User1, User2 and Group1 are >>excluded<< ; User3 and Group2 >>may<< be included). 2nd step: group filtering : only direct members will be synced = only User2, User3 and Group1) Sum: only User 3 go through the 2 filters and is synced, so No - No - Yes

YNY. A filtragem esta abilitada portanto somente membros do GRUPO 2 serão sincronizados. GRUPO 2 nao sincroniza porque não pode ser membro de si mesmo.

So many wrong comments ... Filtering is enabled so only members of Group2 will be synced. Group2 cannot be a member of itself. Group2 will not be synced (even if it is in OU2)

https://azurecloudai.blog/2019/10/20/field-notes-azure-active-directory-connect-domain-ou-and-group-filtering/

{Group2 and User3 belong to OU2 initially}. NYY is correct

Answers are correct, if a user or group has been assigned directly to an OU, they will sync. If they're only nested within a group that is in that OU, the main user account or group will be hiding away somewhere different in the AD Forest so will not sync.

Answers are correct. The filtered group's members are only synced if they also reside in an OU that is also chosen to be synced by the directory options prior.

Answers are correct