Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 4 question 16 discussion

Actual exam question from Microsoft's AZ-300

Question #: 16
Topic #: 4

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named fabrikam.com. The forest contains two child domains named corp.fabrikam.com and research.fabrikam.com.
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.
You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant. You implement seamless single sign-on (SSO).
You plan to change the source of authority for all the user accounts in research.fabrikam.com to Azure AD.
You need to prevent research.fabrikam.com from resyncing to Azure AD.
Solution: You use the Synchronization Service Manager.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead you should customize the default synchronization rule.
Note: The Synchronization Service Manager UI is used to configure more advanced aspects of the sync engine and to see the operational aspects of the service.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom-sync-rule

by BalaMurugesan at May 27, 2020, 5 a.m.

Comments

Submit Cancel

tmurfet

Highly Voted 5 years ago

The preferred way to change domain-based filtering is by running the installation wizard and changing domain and OU filtering. The installation wizard automates all the tasks that are documented in this topic. You should only follow these steps if you're unable to run the installation wizard for some reason. So if we follow Microsoft's preferred method, then B fits the answer.

upvoted 9 times

Jer0i

4 years, 11 months ago

This is likely the case since one of the requirements is to "You need to prevent research.fabrikam.com from resyncing to Azure AD" the keyword being "resynching". They have already completed step "You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant." hence they already did the initial ad synch.

upvoted 2 times

...

Prash85

Highly Voted 5 years ago

Please note: Yes No questions are asking possibilities unless they explicitly say cost effective or preferred method. So answer is A bcse it is possible.

upvoted 5 times

...

azurecert2021

Most Recent 4 years, 5 months ago

A should be the answer as for domain ,Organization Unit and Attribute fitler cab be done with Synchronization Service Manager but if we want to configure advance rule then only we need synchronization rule editor like for Positive filtering: "only sync these". The positive filtering option requires two sync rules. You need one rule (or several) with the correct scope of objects to synchronize. You also need a second catch-all sync rule that filters out all objects that haven't yet been identified as an object that should be synchronized.

upvoted 1 times

...

bc5468521

4 years, 9 months ago

need to prevent ! So answer is B, only rule can prevent

upvoted 1 times

...

AzAlex

4 years, 10 months ago

There are two ways to select the domains to be synchronized: - Using the Synchronization Service - Using the Azure AD Connect wizard. So, Answer A is correct.

upvoted 3 times

...

Rooh

4 years, 10 months ago

the answer is Yes

upvoted 2 times

...

tundervirld

4 years, 10 months ago

Correct Answer: A Explanation: To prevent re-syncing you should stop sync scheduler. The Synchronization Service Manager UI is used to configure more advanced aspects of the sync engine and to see the operational aspects of the service, and here you have option STOP. References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-service-manager-ui-connectors https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-service-manager-ui

upvoted 3 times

...

Prash85

5 years ago

A fits the answer.. as it shouldn't necessary be a rule

upvoted 1 times

...

BalaMurugesan

5 years, 1 month ago

Its should be A. We are looking at preventing the users from child domains synching to Azure AD. In this case, the Domain Based Filtering help is achieving the goal. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#domain-based-filtering

upvoted 3 times

tartar

4 years, 9 months ago

A is ok

upvoted 1 times

...