ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam
Go to Exam

Exam MS-100 topic 3 question 77 discussion

Actual exam question from Microsoft's MS-100
Question #: 77
Topic #: 3
[All MS-100 Questions]

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

You configure Azure AD Connect to sync contoso.com to Azure Active Directory.
Which objects will sync to Azure AD?

  • A. Group1, User1, and User2
  • B. Group1 and User1 only
  • C. User1 and User2 only
  • D. Group1 only
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by acamfox224 at April 2, 2021, 7:26 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
acamfox224
Highly Voted 4 years, 2 months ago
This should be A. Disabled users are synced by default.
upvoted 47 times
syswiz85
4 years, 1 month ago
100% correct. Disabled users get synced but have a sign in block status of true
upvoted 17 times
...
NHaikes
2 years, 11 months ago
Global Security Group is a scope for the group and is set for created groups: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#group-scope
upvoted 1 times
RenegadeOrange
2 years, 10 months ago
Tested and confirm A is correct and both a Global and Universal group synced to M365.
upvoted 3 times
...
...
...
wilmatic81
Highly Voted 4 years, 2 months ago
Disabled accounts are synchronized as well to Azure AD. Disabled accounts are common to represent resources in Exchange, for example conference rooms. The exception is users with a linked mailbox; as previously mentioned, these will never provision an account to Azure AD. The assumption is that if a disabled user account is found, then we will not find another active account later and the object is provisioned to Azure AD with the userPrincipalName and sourceAnchor found. In case another active account will join to the same metaverse object, then its userPrincipalName and sourceAnchor will be used. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-user-and-contacts
upvoted 20 times
PlumpyTumbler
4 years, 1 month ago
Nice source article. Helpful, thank you.
upvoted 3 times
...
vivekrc7
2 years, 11 months ago
Disabled accounts are synchronized as well to Azure AD. Disabled accounts are common to represent resources in Exchange, for example conference rooms. The exception is users with a linked mailbox; as previously mentioned, these will never provision an account to Azure AD. very correct A it is
upvoted 1 times
...
...
mendel79
Most Recent 3 months ago
Selected Answer: C
Global Security Groups do not sync
upvoted 1 times
...
Amir1909
1 year, 4 months ago
A is correct
upvoted 1 times
...
hufflepuff
2 years, 8 months ago
Selected Answer: A
All sync.
upvoted 3 times
...
hufflepuff
2 years, 8 months ago
Selected Answer: A
All Sync
upvoted 3 times
...
Contactfornitish
2 years, 11 months ago
Selected Answer: C
Disabled accounts do sync Groups would not sync unless it's mail enabled
upvoted 2 times
samstorm10
2 years, 9 months ago
Couldn't be more from the truth i'm afraid. This group would sync.
upvoted 1 times
...
...
Rudelke
2 years, 11 months ago
Selected Answer: A
Global security group - YES - tested Enabled User - YES Disabled User (such as SHARED MAILBOX) - YES YES YES
upvoted 3 times
...
DenisRossi
3 years ago
Selected Answer: A
A. Disabled users and global groups are synced.
upvoted 2 times
...
manis73
3 years ago
Selected Answer: A
It is A, AADC does not sync built in security groups but this group is not a built in security group, it has been created
upvoted 3 times
...
mikaiwhodakno
3 years ago
Selected Answer: C
C. Disabled users ARE synced, global security groups are NOT.
upvoted 1 times
...
TechMinerUK
3 years ago
Selected Answer: A
The answer should be A as although in-built security groups are not synchronised a global security group is merely a type of security group and as such could be an additional group create by the organisation which would synchronise via AD Connect. Both users sync to AzureAD since it does not matter if they are disabled or enabled, the user and their status will synchronise across
upvoted 1 times
...
gaem
3 years ago
Selected Answer: C
C, sec groups are excluded.
upvoted 1 times
...
gaem
3 years ago
Selected Answer: C
C... "Azure AD Connect excludes built-in security groups from directory synchronization. Azure AD Connect does not support synchronizing Primary Group memberships to Azure AD. Azure AD Connect does not support synchronizing Dynamic Distribution Group memberships to Azure AD." https://docs.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-user-and-contacts
upvoted 2 times
...
Stiobhan
3 years ago
Answer is C. Global Security Group is a built in group in AD and built in groups are not synced. Disabled users are synced.
upvoted 1 times
One111
2 years, 6 months ago
Global security group is built-in object class and scope. But when you create it, the object is custom. It will get synchronized.
upvoted 2 times
...
...
gaem
3 years ago
Selected Answer: C
C is the answer!
upvoted 1 times
...
M_kuttan
3 years ago
Selected Answer: A
Disabled user account should sync
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel