Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Microsoft 365 Administrator Expert Configuring Identity Synchronization Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft 365 Administrator Expert Configuring Identity Synchronization flashcards as text

  1. An administrator needs to synchronize only specific OUs from on-premises Active Directory to Azure AD. Which feature in Azure AD Connect should they configure?

    Answer: Domain and OU filtering

    Domain and OU filtering in Azure AD Connect allows administrators to select specific OUs to include or exclude from synchronization.

  2. Which attribute is used by default as the source anchor (immutableId) in Azure AD Connect when syncing users?

    Answer: objectGUID

    ObjectGUID is the default source anchor attribute used by Azure AD Connect to uniquely and immutably identify objects.

  3. A company has a staged rollout and wants to enable Password Hash Synchronization without affecting existing users who use pass-through authentication. What should they configure?

    Answer: Enable PHS as a backup for PTA

    Enabling PHS as a backup for PTA ensures seamless SSO failover without changing the primary authentication method for users.

  4. What is the minimum Azure AD Connect sync interval when using the scheduler?

    Answer: 30 minutes

    The minimum synchronization interval for the Azure AD Connect scheduler is 30 minutes; setting it lower is not supported.

  5. An administrator wants to prevent accidental mass deletions during synchronization. Which Azure AD Connect feature helps with this?

    Answer: Accidental delete prevention threshold

    The accidental delete prevention threshold in Azure AD Connect halts a sync cycle if deletions exceed a configured number.

  6. When configuring Azure AD Connect Health, which role is required to view the health data in the Azure portal?

    Answer: Global Reader

    The Global Reader role has sufficient permissions to view Azure AD Connect Health monitoring data in the portal.

  7. A hybrid identity administrator needs to writeback group membership changes from Azure AD to on-premises AD. Which feature must be enabled?

    Answer: Group writeback

    Group writeback allows Azure AD groups to be written back to on-premises Active Directory so they can be used by on-premises applications.