Exam AZ-303 topic 1 question 32 discussion

Actual exam question from Microsoft's AZ-303

Question #: 32
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use the Synchronization Service Manager to modify the Metaverse Designer tab.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead use Synchronization Rules Editor to create a synchronization rule.
Note: Filtering what objects are synced to Azure AD is a common request and there are many instances where filtering by OU just doesn't cut it. One option is to filter users by their UPN suffix so that only users with the public FQDN as their UPN suffix are synced to Azure AD (e.g., [email protected] would be synced while [email protected] would not).
Filtering can be configured using either the GUI (Synchronization Rules Editor) or PowerShell.
Reference:
https://www.sidekicktech.com/blog/field-notes/2019/upn-suffix-filtering-ad-connect/

by certmonster at Dec. 2, 2020, 12:24 p.m.

Comments

Submit Cancel

azurecert2021

Highly Voted 4 years, 6 months ago

given answer is correct The metaverse search tab is useful for troubleshooting data-related problems. In the top half, you can create a query based on a combination of attributes. When you are satisfied with your query, click Search. The result is visible in the bottom grid. You can select which columns should be visible with Column Settings. https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/hybrid/how-to-connect-sync-service-manager-ui-mvsearch.md For most customers, there is nothing to configure here. https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/hybrid/how-to-connect-sync-service-manager-ui-mvdesigner.md

upvoted 12 times

JayBee65

3 years, 6 months ago

With respect that does not address the question. The question asks "You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD." You are describing troubleshooting and searching capabilities. THis seems completely irrelevant.

upvoted 1 times

...

certmonster

Highly Voted 4 years, 8 months ago

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-service-manager-ui-mvdesigner For most customers, there is nothing to configure here. So, NO.

upvoted 6 times

TEMPKAKAM

4 years, 8 months ago

Yes..Answer is correct

upvoted 1 times

...

lsdom

Most Recent 3 years, 7 months ago

The answer is NO

upvoted 2 times

...

syu31svc

3 years, 11 months ago

Instead use synchronization rule editor and create a rule based on UPN. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom-sync-rule Answer is No

upvoted 1 times

...

nfett

4 years, 2 months ago

B is the right answer. look at the description from this url. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-service-manager-ui-mvsearch

upvoted 3 times

...

Krsto

4 years, 5 months ago

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#select-the-domains-to-be-synchronized-using-the-synchronization-service You need to configure connectors, not metaverse designer.

upvoted 1 times

...