Microsoft 365 Administrator Expert Configuring Identity Synchronization Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Configuring Identity Synchronization flashcards as text
Which Azure AD Connect synchronization rule action should be used to prevent a specific attribute from being exported to Azure AD?
Answer: Set the flow type to Expression with NULL
Using an Expression flow type with a NULL value in a synchronization rule prevents that attribute from being exported to Azure AD.
An organization enables Seamless SSO. Which on-premises object is created in Active Directory as part of this configuration?
Answer: A computer account named AZUREADSSOACC
Azure AD Connect creates a computer account named AZUREADSSOACC in the on-premises AD to facilitate Seamless SSO Kerberos ticket issuance.
What happens when Azure AD Connect is placed in staging mode?
Answer: It imports and synchronizes objects but does not export changes
In staging mode, Azure AD Connect runs the full import and sync process but does not export any changes to Azure AD or on-premises AD.
An administrator needs to force an immediate full synchronization cycle. Which PowerShell command should they run?
Answer: Start-ADSyncSyncCycle -PolicyType Initial
Start-ADSyncSyncCycle -PolicyType Initial triggers a full synchronization cycle immediately on the Azure AD Connect server.
Which feature allows on-premises users to reset their passwords from the Azure AD self-service password reset portal and have the new password written back to AD?
Answer: Password writeback
Password writeback is the Azure AD Connect feature that synchronizes password changes made in the cloud back to the on-premises Active Directory.
A company with multiple on-premises AD forests needs to synchronize all users to a single Azure AD tenant. Which Azure AD Connect topology supports this scenario?
Answer: Multiple forests, single Azure AD tenant
The multiple forests, single Azure AD tenant topology allows Azure AD Connect to merge identities from multiple forests into one Azure AD tenant.
Which Azure AD Connect synchronization engine component is responsible for storing a unified view of all synchronized objects from all connected directories?
Answer: Metaverse
The metaverse is the central repository in the Azure AD Connect sync engine that stores a unified, consolidated representation of all synchronized objects.