Exam AZ-800 topic 1 question 67 discussion

Actual exam question from Microsoft's AZ-800

Question #: 67
Topic #: 1

HOTSPOT
-

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named fabrikam.com. Fabrikam.com syncs with contoso.com.

In Sub1, you create a Microsoft Entra Domain Services domain configured as shown in the following table.

In domain1.onmicrosoft.com, you create two OUs named OU1 and OU2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Ksk08 at Oct. 14, 2024, 6:52 a.m.

Comments

Submit Cancel

b3cbdd9

Highly Voted 9 months ago

stop trolling @Ksk08

upvoted 9 times

...

Krayzr

Highly Voted 8 months, 2 weeks ago

Y N Y Yes. Users in the on-premises AD DS domain (contoso.com) that are synchronized to Microsoft Entra ID (fabrikam.com) will be synchronized to the AADDC Users OU in the managed domain (domain1.onmicrosoft.com) No. Synchronization in Microsoft Entra Domain Services is one-way from Microsoft Entra ID to the managed domain. Users created in the managed domain (domain1.onmicrosoft.com) do not sync back to Microsoft Entra ID (fabrikam.com). Yes. Users created in Microsoft Entra ID (fabrikam.com) will be synchronized to the managed domain (domain1.onmicrosoft.com) and placed in the AADDC Users OU1. https://learn.microsoft.com/en-us/entra/identity/domain-services/synchronization

upvoted 6 times

...

Tr619899

Most Recent 2 weeks ago

Analysis of Statement 1: YES contoso.com is on-prem. It syncs to fabrikam.com (Entra ID) via Azure AD Connect. Microsoft Entra Domain Services (domain1.onmicrosoft.com) automatically syncs from fabrikam.com, not from contoso.com directly. So, if User1 exists in contoso.com and is synced into fabrikam.com, then YES, User1 will appear in domain1.onmicrosoft.com (under AADDC Users OU). Analysis of Statement 2: No domain1.onmicrosoft.com is Microsoft Entra Domain Services (read-only replica). You cannot create users directly in AADDS; it only receives synced data from Entra ID (fabrikam.com). So, adding User2 in domain1.onmicrosoft.com is not possible, hence cannot sync back to fabrikam.com. Analysis of Statement 3: Yes Yes, fabrikam.com is the source Entra tenant. Microsoft Entra Domain Services (domain1.onmicrosoft.com) syncs users from fabrikam.com. New users in fabrikam.com appear in AADDS under the Users container unless moved.

upvoted 1 times

...