exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 1 question 4 discussion

Actual exam question from Microsoft's AZ-303
Question #: 4
Topic #: 1
[All AZ-303 Questions]

HOTSPOT -
Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.
Adatum.com contains the user accounts in the following table.

Adatum.onmicrosoft.com contains the user accounts in the following table.

You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
Which user accounts should you use in Adatum.com and Adatum.onmicrosoft.com to implement Azure AD Connect? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: User5 -
In Express settings, the installation wizard asks for the following:
AD DS Enterprise Administrator credentials
Azure AD Global Administrator credentials
The AD DS Enterprise Admin account is used to configure your on-premises Active Directory. These credentials are only used during the installation and are not used after the installation has completed. The Enterprise Admin, not the Domain Admin should make sure the permissions in Active Directory can be set in all domains.

Box 2: UserA -
Azure AD Global Admin credentials are only used during the installation and are not used after the installation has completed. It is used to create the Azure AD
Connector account used for synchronizing changes to Azure AD. The account also enables sync as a feature in Azure AD.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-accounts-permissions

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MichaelCWWong
Highly Voted 4 years, 5 months ago
Answer is correct per below doc. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions#installing-azure-ad-connect
upvoted 21 times
17Master
3 years, 5 months ago
Correct. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions#installing-azure-ad-connect In Express settings, the installation wizard asks for the following: AD DS Enterprise Administrator credentials Azure AD Global Administrator credentials
upvoted 2 times
...
...
ffoolleerr
Highly Voted 4 years, 5 months ago
This was in my exam couple of days ago...I scored 8xx I answered the given answers
upvoted 7 times
...
tashakori
Most Recent 1 year, 3 months ago
Given answer is correct
upvoted 1 times
...
rxlicon
1 year, 10 months ago
AD DS Enterprise Administrator credentials on-prem Azure AD Global Administrator credentials azure
upvoted 1 times
...
itvinoth83
3 years, 3 months ago
On Exam today, 28-03-2022; Most of the questions from this site, very useful !!
upvoted 1 times
...
Azuremaster2
3 years, 4 months ago
Appeared today 13.2.2022
upvoted 1 times
...
AlSw
3 years, 6 months ago
In question it's stated that "The solution must follow the principle of least privilege." and explicitely only one AD domain was given. So "domain admin" sounds to me better fit than "entreprise admin".
upvoted 2 times
...
rjcverar
3 years, 8 months ago
Appeared on 29.10.2021
upvoted 1 times
...
plmmsg
3 years, 10 months ago
AD DS Enterprise Administrator Azure AD Global Administrator
upvoted 4 times
...
syu31svc
3 years, 10 months ago
The pre-requisites for accounts while installing and configuring Azure AD Connect are : You must have an Azure AD Global Administrator account for the Azure AD tenant you want to integrate with. This account must be a school or organization account and can't be a Microsoft account. UserA is the Global Administrator. If you use express settings or upgrade from DirSync, you must have an Enterprise Administrator account for your on-premises Active Directory. User5 is the Enterprise Admin. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-prerequisites Answer given is right
upvoted 1 times
...
ExStudent
3 years, 10 months ago
Following accounts are need to perform the sync between the directories Local Administrator A/c: For installing Azure AD Connect - local Admin permissions on the machine. AD DS Enterprise Admin account: Optionally used to create the “AD DS Connector account” Azure AD Global Administrator account: create Azure AD Connector account on Azure side and configure Azure AD. SQL SA account (optional): Create the ADSync database when using the full version of SQL Server on local or remote to the Azure AD Connect installation. could be same acct as the Enterprise Admin.
upvoted 1 times
...
scottishstvao
3 years, 10 months ago
On Exam yesterday 08/14/2021 - The answer used was User3 and UserA I passed with 828/1000
upvoted 2 times
...
goTEXANS
3 years, 11 months ago
The Azure AD Connect installation wizard offers two different paths: Express Settings and Custom Settings In Express settings, the installation wizard asks for the following: AD DS Enterprise Administrator credentials Azure AD Global Administrator credentials
upvoted 2 times
...
janclintv
4 years ago
on Exam 6/14
upvoted 3 times
...
nfett
4 years, 1 month ago
answer is correct per https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions
upvoted 3 times
...
ddb116
4 years, 1 month ago
The answer is correct.. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions
upvoted 1 times
...
naveedxxa
4 years, 1 month ago
on my exam today
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...