Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 5 question 25 discussion

Actual exam question from Microsoft's MS-100

Question #: 25
Topic #: 5

Your network contains an Active Directory forest named contoso.local.
You purchase a Microsoft 365 subscription.
You plan to move to Microsoft 365 and to implement a hybrid deployment solution for the next 12 months.
You need to prepare for the planned move to Microsoft 365.
What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

A. Purchase a third-party X.509 certificate.
B. Rename the Active Directory forest.
C. Purchase a custom domain name.
D. Create an external forest trust.

Show Suggested Answer

Suggested Answer: C 🗳️
The first thing you need to do before you implement directory synchronization is to purchase a custom domain name. This could be the domain name that you use in your on-premise Active Directory if it's a routable domain name, for example, contoso.com.
If you use a non-routable domain name in your Active Directory, for example contoso.local, you'll need to add the routable domain name as a UPN suffix in Active
Directory.
Reference:
https://docs.microsoft.com/en-us/office365/enterprise/set-up-directory-synchronization

by Dylan at Oct. 9, 2019, 8:05 a.m.

Comments

Submit Cancel

Dylan

Highly Voted 5 years, 8 months ago

And domain name (contoso.com), more to the point

upvoted 12 times

...

Ash473

Highly Voted 3 years, 10 months ago

In exam today

upvoted 8 times

...

Amir1909

Most Recent 1 year, 4 months ago

Correct

upvoted 1 times

...

Startkabels

2 years, 7 months ago

Selected Answer: C

Nobrainer C

upvoted 1 times

...

estarisbourne

4 years, 4 months ago

I guess you need a custom domain that you own to register and verify but like not sure that is the best way to spend 12 months of development :) answer is correct though.

upvoted 2 times

Durden871

3 years, 4 months ago

I took it as, you need a hybrid solution for 12 months. Could maybe migrate to cloud thereafter. Either way, if you're going to sync your domain to 365, probably should make sure you own it first.

upvoted 3 times

...

PattiD

4 years, 6 months ago

https://docs.microsoft.com/en-us/microsoft-365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization?view=o365-worldwide

upvoted 3 times

PattiD

4 years, 6 months ago

YOU MUST HAVE/BUY A ROUTABLE DOMAIN FIRST. ANSWER IS 10000% CORRECT.

upvoted 8 times

ARYMBS

3 years, 2 months ago

NO you must not i (you can leave, theoretically with onmicrosoft.com). But it is best answer in this case.

upvoted 1 times

Startkabels

2 years, 7 months ago

It's a hybrid deployment, that's not going to work very well...

upvoted 1 times

...

mkoprivnj

4 years, 6 months ago

C for sure!

upvoted 5 times

...

Sango

4 years, 9 months ago

The .local is an invalid UPN for all users that will be synced. All the users on-premise UPNs must be changed to match the custom AAD domain. The closest answer is B.

upvoted 2 times

afbnfz

4 years, 1 month ago

The on-prem UPNs must be changed to match the custom AAD domain, yes - but you can't do that until you purchase the custom domain.

upvoted 2 times

...

donathon

4 years, 8 months ago

No you just have to create the new custom domain UPN in AD Forest and Trust. SO the answer to purchase a custom domain name is correct. Without a custom domain name which also makes your domain public, you cannot have Hybrid deployment unless you want the users to sign-in using @<domain>.onmicrosoft.com.

upvoted 5 times

...

riccardo

4 years, 10 months ago

I don't understand why I should buy a custom domain name. I should register the custom domain name, not buy. question stated that I want to implement an hybrid deployment so I have already a custom domain name acquired and I have an Exchange on premise as far I undestand. perhaps I use a private CA for virtual directories, so it make sense that I buy a third party certificate. for me the right answer is A

upvoted 2 times

nicknameitis

4 years, 9 months ago

what domain would you buy the certificate for? third parties will not issue certificates for a .local domain name. I would go with add a custom domain name.

upvoted 3 times

...

AADapson

4 years, 7 months ago

The question never made mention of Exchange Server is available. You will need to buy custom domain.

upvoted 2 times

...

WoneSix

5 years, 4 months ago

Dylan, the question doesn't say anything about Exchange.

upvoted 2 times

...

Dylan

5 years, 8 months ago

This implies that Exchange already exists - I'd assume that you already own a certificate if this is the case...maybe not!

upvoted 3 times

HvD

4 years, 11 months ago

There are several hybrid-possibilities: Exchange, Sharepoint. But that doesn't matter here, the question is: what to do before setting up a directory synchronization. Well, set up your domain(name) first.

upvoted 3 times

...