Exam AZ-500 topic 2 question 17 discussion

Correct Answer as per provided link. In Express settings, the installation wizard asks for the following: AD DS Enterprise Administrator credentials Azure AD Global Administrator credentials

C, E, for sure. Role ==> Global administrator Group ==> Enterprise Admins

You must have a Microsoft Entra Global Administrator account or Hybrid Identity Administrator account for the Microsoft Entra tenant you want to integrate with. This account must be a school or organization account and can't be a Microsoft account. If you use express settings or upgrade from DirSync, you must have an Enterprise Administrator account for your on-premises Active Directory. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-install-prerequisites

Global Administrator and Enterprise Admin are required FOR THE SETUP. For operation it will use less-privileged accounts.

Correct

Answers are correct. Note that with version 2.X of AD Connect, Global administrator can be replaced with Hybrid Identity Administrator role.

C. the Global administrator role in Azure AD E. the Enterprise Admins group in Active Directory

To perform the planned configuration using the Express Settings installation option in Azure AD Connect, you should identify the following roles and groups: C. The Global administrator role in Azure AD: This role is required to perform the initial configuration of Azure AD Connect and manage the synchronization process between on-premises Active Directory and Azure AD. D. The User administrator role in Azure AD: This role is required to manage user accounts and their attributes in Azure AD. It is necessary for the synchronization process to create and update user accounts in Azure AD based on the on-premises Active Directory.

C. the Global administrator role in Azure AD E. the Enterprise Admins group in Active Directory

CE without any doubts

correct

C and E are correct. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions#express-settings-installation

This question is no longer valid when you use Azure ADConnect Version 1.4 or above: As of build 1.4.###.# it is no longer supported to use an enterprise admin or a domain admin account as the AD DS Connector account.

correct

correct answer

# IN EXAM - 29/9/2021 - Pass!

In Exam 8/4/2021