Exam AZ-800 topic 1 question 54 discussion

To ensure that users in the forest who have a custom NoSync attribute are excluded from synchronization, you must configure the Azure AD Connect cloudFiltered attribute to True. And the tool that you should use is the Synchronization Rules Editor. With the Synchronization Rules Editor, you can create a custom inbound rule that sets the cloudFiltered attribute to True when the NoSync attribute is present. This will cause Azure AD Connect to exclude these users from synchronization. Keep in mind that any such change should be made with care to avoid unintended impacts on domain services and operations

Given answer seems to be right: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-installation-wizard#customize-synchronization-options > doesn't mention attribute filtering (but does mention Domain, OU and Group filtering).

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering Note Microsoft Entra Cloud Sync and Microsoft Entra Connect Sync filter out any Active Directory objects where the isCriticalSystemObject attribute is set to True.

Tested in lab setup, both Azure AD connect and Sync Rules editor seem to be a way to do this, and since it's missing the extra addition like "Least administrative effort", both answers are ok?

To exclude users with a custom attribute of NoSync from synchronization, you can configure the cloudFiltered attribute in Azure AD Connect. Here’s how you can do it: Configure the cloudFiltered Attribute: The cloudFiltered attribute is used to exclude objects from synchronization to Azure AD. You can’t directly set this attribute in Active Directory; instead, you’ll create an inbound rule to set its value in the metaverse. In Azure AD Connect, go to the Transformations section. Click Add transformation. Set the FlowType to Constant. Set the Target Attribute to cloudFiltered. In the Source field, enter true. Which Tool to Use: You’ll use Azure AD Connect to configure the cloudFiltered attribute. This tool allows you to manage synchronization between your on-premises AD DS forest and Azure AD, ensuring that the specified users are excluded from synchronization

Attribute: TRUE Tool: Microsoft Azure AD Connect

Seems to be correct https://www.youtube.com/watch?v=zYy0KAZBLQ0