Exam AZ-200 topic 4 question 4 discussion

Actual exam question from Microsoft's AZ-200

Question #: 4
Topic #: 4

CompanyA has multiple on-premises Active Directory forests. CompanyA purchases CompanyB.
CompanyB has multiple on-premises Active Directory forests. CompanyB does not have Foreign Security Principals (FSPs).
You need to connect the Active Directory environments without the use of a staging server and causing minimal disruption to current authentication.
Which Azure AD Connect topology should you use?

A. multiple forests, match users
B. multiple forests, multiple sync servers to one Azure AD tenant
C. multiple forests, single sync server, single Azure AD tenant
D. single forest, single Azure AD tenant

Show Suggested Answer

Suggested Answer: C 🗳️
Multiple forests, single sync server, users are represented in only one directory
In this environment, all on-premises forests are treated as separate entities. No user is present in any other forest. Each forest has its own Exchange organization, and there's no GALSync between the forests. This topology might be the situation after a merger/acquisition or in an organization where each business unit operates independently. These forests are in the same organization in Azure AD and appear with a unified GAL. In the preceding picture, each object in every forest is represented once in the metaverse and aggregated in the target Azure AD tenant.
Incorrect Answers:
A: Match users uses Foreign Security Principals.
B: Having more than one Azure AD Connect sync server connected to a single Azure AD tenant is not supported.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies

by designtshirt at April 4, 2025, 8:51 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!

Exam AZ-200 All Questions

View all questions & answers for the AZ-200 exam

Exam AZ-200 topic 4 question 4 discussion

Comments

SY0-701