Exam MS-100 topic 4 question 54 discussion

Actual exam question from Microsoft's MS-100

Question #: 54
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.

Azure AD Connect has the following settings:
✑ Password Hash Sync: Enabled
✑ Password writeback: Enabled
✑ Group writeback: Enabled
You need to add User2 to Group 2.
Solution: From Azure PowerShell, you run the Set-AzureADGroup cmdlet.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
The Set-AzureADGroup cmdlet updates a group in Azure Active Directory (AD) but User2 and Group2 are objects in Windows Server AD.

by lucidgreen at April 21, 2021, 1:51 a.m.

Comments

Submit Cancel

lucidgreen

Highly Voted 4 years, 3 months ago

The correct commandlet would be Add-AzureADGroupMember.

upvoted 8 times

melatocaroca

4 years, 1 month ago

Add-AzureADGroupMember -ObjectId <String> -RefObjectId <String> [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>] Reference https://docs.microsoft.com/en-us/powershell/module/azuread/add-azureadgroupmember?view=azureadps-2.0

upvoted 1 times

...

J0J0

4 years, 2 months ago

Should be done in on-premise AD

upvoted 14 times

...

venwaik

Highly Voted 4 years ago

Since group2 is located on-prem, you should add user2 in the on-prem AD. Command would be: Add-AdGroupMember -identity "Groupname" -member "username"

upvoted 5 times

venwaik

4 years ago

BUT: since group writeback is enabled, you should use "Add-AzureADGroupMember -ObjectId (Groupname) -RefObjectID (Username)" in this case as Lucidgreen commented.

upvoted 1 times

Redrock2063

3 years, 11 months ago

Group writeback only applies to Microsoft 365 groups, not AD security groups

upvoted 11 times

m43s

3 years, 11 months ago

Brilliant my friend 🤌

upvoted 2 times

...

Paolo2022

2 years, 9 months ago

This is not correct anymore: all groups are synced by now. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-group-writeback-v2 This is an old question, which probably won't be shown anymore.

upvoted 3 times

One111

2 years, 7 months ago

But i(1) is disabled by default, (2) question is not saying anything about this feature has been enabled (3) when enebled it won't be show in Azure AD Connect settings.

upvoted 1 times

...

Load full discussion...

...