Exam MS-100 topic 3 question 31 discussion

If AD can access all 3 forests - enough with one server that syncs everything.

Answer: B Explanation Azure AD Connect can be active on only one server. You can install Azure AD Connect on another server for redundancy but the additional installation would need to be in Staging mode. An Azure AD connect installation in Staging mode is configured and ready to go but it needs to be manually switched to Active to perform directory synchronization. Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom

B is correct

✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant ✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-multiple-sync-servers-to-one-azure-ad-tenant ✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#staging-server

Was in my exam today 05/08/22.

In exam on 05/22.

In exam today

Scenario Multiple forests, single Azure AD tenant When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain. If necessary, to reach all forests Other cases can apply, but question remark The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies Answer B

You can only have one AD Connect server active per tenant. So B.

B for sure!

Having more than one Azure AD Connect sync server connected to a single Azure AD tenant is not supported. The exception is the use of a staging server. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

As stated in comments before, but more clearly and with a link: "Having more than one Azure AD Connect sync server connected to a single Azure AD tenant is not supported. The exception is the use of a staging server." https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain. If necessary to reach all forests, you can place the server in a perimeter network (also known as DMZ, demilitarized zone, and screened subnet). https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#staging-server

Should be A. You can only have 1 ADConnect for forest