Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 3 question 31 discussion

Actual exam question from Microsoft's MS-100

Question #: 31
Topic #: 3

Your network contains three Active Directory forests.
You create a Microsoft Azure Active Directory (Azure AD) tenant.
You plan to sync the on-premises Active Directory to Azure AD.
You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.
What should you include in the recommendation?

A. three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
B. one Azure AD Connect sync server and one Azure AD Connect sync server in staging mode
C. three Azure AD Connect sync servers and one Azure AD Connect sync server in staging mode
D. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode

Show Suggested Answer

Suggested Answer: B 🗳️

by ibre34 at Feb. 17, 2020, 6:58 p.m.

Comments

Submit Cancel

lusis987

Highly Voted 5 years, 3 months ago

If AD can access all 3 forests - enough with one server that syncs everything.

upvoted 18 times

...

[Removed]

Highly Voted 4 years, 10 months ago

Answer: B Explanation Azure AD Connect can be active on only one server. You can install Azure AD Connect on another server for redundancy but the additional installation would need to be in Staging mode. An Azure AD connect installation in Staging mode is configured and ready to go but it needs to be manually switched to Active to perform directory synchronization. Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom

upvoted 15 times

donathon

4 years, 8 months ago

Adding on. There's a 1:1 relationship between an Azure AD Connect sync server and an Azure AD tenant. For each Azure AD tenant, you need one Azure AD Connect sync server installation. Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies

upvoted 2 times

...

Amir1909

Most Recent 1 year, 4 months ago

B is correct

upvoted 1 times

...

st2023

2 years, 3 months ago

✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant ✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-multiple-sync-servers-to-one-azure-ad-tenant ✑https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#staging-server

upvoted 1 times

...

Cheekypoo

2 years, 10 months ago

Was in my exam today 05/08/22.

upvoted 2 times

...

charat

3 years ago

Selected Answer: B

In exam on 05/22.

upvoted 5 times

...

JakeH

3 years, 7 months ago

In exam today

upvoted 1 times

...

melatocaroca

4 years ago

Scenario Multiple forests, single Azure AD tenant When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain. If necessary, to reach all forests Other cases can apply, but question remark The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies Answer B

upvoted 2 times

...

lucidgreen

4 years, 3 months ago

You can only have one AD Connect server active per tenant. So B.

upvoted 4 times

lucidgreen

4 years, 3 months ago

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies

upvoted 1 times

...

mkoprivnj

4 years, 6 months ago

B for sure!

upvoted 2 times

...

kazaki

5 years ago

Having more than one Azure AD Connect sync server connected to a single Azure AD tenant is not supported. The exception is the use of a staging server. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

upvoted 2 times

...

mmdcert

5 years, 2 months ago

As stated in comments before, but more clearly and with a link: "Having more than one Azure AD Connect sync server connected to a single Azure AD tenant is not supported. The exception is the use of a staging server." https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

upvoted 2 times

...

VP11

5 years, 3 months ago

When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain. If necessary to reach all forests, you can place the server in a perimeter network (also known as DMZ, demilitarized zone, and screened subnet). https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#staging-server

upvoted 5 times

...

ibre34

5 years, 4 months ago

Should be A. You can only have 1 ADConnect for forest

upvoted 3 times

WoneSix

5 years, 4 months ago

But ibre, option A has 3 servers. B has only one synch server and one server in staging mode, which is what Microsoft recommends. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#staging-server

upvoted 14 times

WoneSix

5 years, 3 months ago

Sorry, my previous answer wasn't woded right. A TENANT can have only one AAD Connect server. A forest can have as many as necessary, as long as no two of them are synching the same objects. This means that, if there are two AAD Connects, they have to synch to two tenants.

upvoted 4 times

...

AADapson

4 years, 7 months ago

You can have One Active ADConnect and another one in staging mode. You can't have two active ADConnect

upvoted 1 times

...