Exam AZ-300 topic 4 question 15 discussion

Actual exam question from Microsoft's AZ-300

Question #: 15
Topic #: 4

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named fabrikam.com. The forest contains two child domains named corp.fabrikam.com and research.fabrikam.com.
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.
You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant. You implement seamless single sign-on (SSO).
You plan to change the source of authority for all the user accounts in research.fabrikam.com to Azure AD.
You need to prevent research.fabrikam.com from resyncing to Azure AD.
Solution: From the Azure Active Directory admin center, you delete a custom domain.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead you should customize the default synchronization rule.
Note:
To delete a custom domain name, you must first ensure that no resources in your directory rely on the domain name. You can't delete a domain name from your directory if:
✑ Any user has a user name, email address, or proxy address that includes the domain name.
✑ Any group has an email address or proxy address that includes the domain name.
✑ Any application in your Azure AD has an app ID URI that includes the domain name.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom-sync-rule

by sourabh7257 at July 15, 2020, 1:54 p.m.

Comments

Submit Cancel

tundervirld

Highly Voted 4 years, 10 months ago

Will be, NO. The domain name should be clean, and in this question doesn't tell it. So can't delete the custom domain. To prevent re-syncing you should stop sync scheduler. https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/domains-manage https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-scheduler#stop-the-scheduler

upvoted 6 times

...

akki74

Most Recent 4 years, 9 months ago

correct

upvoted 2 times

...