Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 2 question 36 discussion

Actual exam question from Microsoft's AZ-303

Question #: 36
Topic #: 2

HOTSPOT -
Your network contains an Active Directory domain that is synced to Azure Active Directory (Azure AD) as shown in the following exhibit.

You have a user account configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: No -
Password writeback is disabled.
Note: Having a cloud-based password reset utility is great but most companies still have an on-premises directory where their users exist. How does Microsoft support keeping traditional on-premises Active Directory (AD) in sync with password changes in the cloud? Password writeback is a feature enabled with Azure
AD Connect that allows password changes in the cloud to be written back to an existing on-premises directory in real time.

Box 2: No -

Box 3: Yes -
Yes, there is an Edit link for Location Info.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

by Allahham at July 1, 2021, 4:12 a.m.

Comments

Submit Cancel

Yiannisthe7th

Highly Voted 4 years ago

Correct answer N N Y

upvoted 16 times

[Removed]

4 years ago

Can't confirm the first one though this looks correct. I checked on a free license with Azure Connect and can confirm that usage location is settable, but just about everything else (including job title) is greyed out for hybrid users. I thought that they'd grey out everything based on synchronized attributes but even though usagelocation is synced for some reason it can still be set.

upvoted 1 times

pentium75

4 years ago

"Usage location" is a pure AAD attribute, it doesn't exist in on-prem AD. Other attributes are synced from on-prem AD, and they could be changed in AAD if writeback would be enabled - but isn't, both user and password write back is disabled in the example. Thus NNY seems correct.

upvoted 4 times

...

syu31svc

Highly Voted 3 years, 11 months ago

1. Password write back is disabled in Azure AD Connect. 2. Job title cannot be updated from Azure portal. It has to sync from source 3. Location can be edited from Azure portal. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback No No Yes

upvoted 13 times

suriyaswamy

3 years, 7 months ago

Good Explanation

upvoted 1 times

...

sandeepmalik

Most Recent 3 years, 4 months ago

In today's exam. Score 900+ Correct answer.

upvoted 1 times

...

nd78

3 years, 6 months ago

on Exam today 21st Jan, 2022

upvoted 1 times

...

plmmsg

3 years, 7 months ago

Answer is N, N, Y

upvoted 1 times

...

tomatosis

3 years, 7 months ago

On exam 23 Dec 2021, I chose the same

upvoted 2 times

...

ballzos

3 years, 11 months ago

From Azure AD Portal, we can reset the password of the synced user. But the password will be replaced by AADC when reaching the sync cycle. So, it means you can reset the password and it works for a while before return to the old password.

upvoted 1 times

...

crazyaboutazure

4 years ago

Answer is correct as password writeback is disabled which will prevent the passwords reset to synchronize back even though synchronization is enabled.

upvoted 2 times

...

lucascruzm

4 years ago

The correct ans: Y N Y Tested on my lab.

upvoted 4 times

lucascruzm

4 years ago

The correct ans: N N Y ********

upvoted 4 times

...

pentium75

4 years ago

No because Password Hash Synchronisation is enabled but Password Writeback is disabled. Thus on-prem AD is the password source and it has to be changed there.

upvoted 3 times

MalonJay

3 years, 7 months ago

Y N Y. You can change the password but it won't be synced to the On-Prem servers.

upvoted 1 times

...

Allahham

4 years, 1 month ago

i think it should be N Y Y

upvoted 3 times

pentium75

4 years ago

Don't think so because Job Title is a synced attribute but User Writeback is disabled.

upvoted 2 times

...