QUESTION: 180 Exam Topic: 3 - Question Set 3

Your network contains two on-premises Active Directory forests named contoso.com and fabrikam.com. Fabrikam.com contains one domain and ve domain controllers. Contoso.com contains the domains shown in the following table.

You need to sync all the users from both the forests to a single Azure Active Directory (Azure AD) tenant by using Azure AD Connect.
What is the minimum number of Azure AD Connect sync servers required?

Answer(s): A

Explanation:

You can have only one active Azure AD Connect server synchronizing accounts to a single Azure Active Directory (Azure AD) tenant. You can have 'backup'
Azure AD Connect servers, but these must be running in 'staging' mode. Staging mode means the Azure AD Connect instance is not actively synchronizing users but is ready to be bought online if the active Azure AD Connect instance goes o ine.
When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain.
If necessary, to reach all forests, you can place the server in a perimeter network (also known as DMZ, demilitarized zone, and screened subnet).
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

Reference:

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

Reveal Solution Next Question

QUESTION: 181 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table.

The groups have the members shown in the following table.

You are con guring synchronization between fabrikam.com and a Microsoft Azure Active Directory (Azure AD) tenant. You con gure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit.

You con gure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: No
The ltering is con gured to synchronize Group2 and OU2 only. The effect of this is that only members of Group2 who are in OU2 will be synchronized.
User2 is in Group2. However, the User2 account object is in OU1 so User2 will not synchronize to Azure AD.

Box 2: Yes
Group2 is in OU2 so Group2 will synchronize to Azure AD. However, only members of the group who are in OU2 will synchronize. Members of Group2 who are in OU1 will not synchronize.

Box 3: Yes
User3 is in Group2 and in OU2. Therefore, User3 will synchronize to Azure AD.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-con gure- ltering#group-based- ltering

Reference:

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-con gure- ltering#group-based- ltering

Reveal Solution Next Question

QUESTION: 182 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the users shown in the following table.

You create an Azure Active Directory (Azure AD) tenant named fabrikam.onmicrosoft.com. You plan to sync the users in the forest to fabrikam.onmicrosoft.com by using Azure AD Connect. Which username will be assigned to User1 and User2 in Azure AD after the synchronization? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

If you added the contoso.com and east.contoso.com domains as custom domains in Microsoft 365, then the users would be assigned their user principle names as Microsoft 365 usernames.
However, the question does not state that you have added the domains as custom domains. Therefore, both users will use the default @fabrikam.onmicrosoft.com domain for their usernames.

Reveal Solution Next Question

QUESTION: 183 Exam Topic: 3 - Question Set 3

Your network contains an Active Directory domain named adatum.com that is synced to Microsoft Azure Active Directory (Azure AD).
The domain contains 100 user accounts.
The city attribute for all the users is set to the city where the user resides. You need to modify the value of the city attribute to the three-letter airport code of each city.
What should you do?

From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
From Azure Cloud Shell, run the Get-MsolUser and Set-MSOluser cmdlets.
From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.

Answer(s): A

Explanation:

The user accounts are synced from the on-premise Active Directory to the Microsoft Azure Active Directory (Azure AD). Therefore, the city attribute must be changed in the on-premise Active Directory.
You can modify certain attributes of multiple user accounts simultaneously by selecting them in Active Directory Administrative Center or Active Directory Users and Computers, right clicking then selecting Properties.
The other three options all suggest modifying the city attribute of the users in the Azure Active Directory which is incorrect.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.
2. From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
Other incorrect answer options you may see on the exam include the following:
1. From the Azure portal, select all the Azure AD users, and then use the User settings blade.
2. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.
3. From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.

Reference:

https://blogs.technet.microsoft.com/canitpro/2015/11/25/step-by-step-managing-multiple-user-accounts-via-active-directory-admin-center/

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 34)

QUESTION: 180 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 181 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 182 Exam Topic: 3 - Question Set 3

Explanation:

QUESTION: 183 Exam Topic: 3 - Question Set 3

Explanation:

Reference: