Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Microsoft 365 Administrator Expert Configuring Identity Synchronization Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft 365 Administrator Expert Configuring Identity Synchronization flashcards as text

  1. An administrator wants to configure Azure AD Connect to use an existing service account instead of creating a new one. During which setup step is this configured?

    Answer: Custom installation under 'Service Account'

    The custom installation path in Azure AD Connect includes a 'Service Account' configuration step where an existing account can be specified.

  2. What is the effect of enabling the 'Do not configure' option for the Azure AD sign-in configuration during Azure AD Connect setup?

    Answer: Azure AD Connect will skip configuring UPN suffix mapping

    Selecting 'Do not configure' skips the UPN suffix mapping step, leaving the sign-in configuration to be handled manually after installation.

  3. Which tool within the Azure AD Connect package is used to troubleshoot and view the attributes of objects in the connector space and metaverse?

    Answer: Synchronization Service Manager

    The Synchronization Service Manager provides a GUI to inspect connector spaces, metaverse objects, run history, and troubleshoot sync issues.

  4. A Microsoft 365 administrator needs to ensure that users in a specific AD security group are excluded from synchronization to Azure AD. What should they configure?

    Answer: Group-based filtering in Azure AD Connect

    Group-based filtering in Azure AD Connect allows administrators to limit synchronization to members of a specified Active Directory group, effectively excluding all others.

  5. What is the purpose of the 'msDS-ConsistencyGuid' attribute in Azure AD Connect?

    Answer: It stores the user's immutable ID used as the source anchor

    The msDS-ConsistencyGuid attribute is used by Azure AD Connect as the source anchor (immutableId) to provide a stable, administrator-controllable identity anchor.

  6. An organization using AD FS for federation wants to add Azure AD Connect Pass-Through Authentication as a fallback. What must they configure?

    Answer: Convert the domain from Federated to Managed in Azure AD

    To switch from AD FS to Pass-Through Authentication, the domain must be converted from Federated to Managed in Azure AD using Azure AD Connect.

  7. Which Azure AD Connect Health alert indicates that the synchronization agent has not connected to the service in more than 24 hours?

    Answer: Agent disconnected

    The 'Agent disconnected' alert fires in Azure AD Connect Health when the sync agent has been unable to communicate with the Azure AD Connect Health service for over 24 hours.