Exam AZ-500 topic 2 question 5 discussion

Actual exam question from Microsoft's AZ-500

Question #: 5
Topic #: 2

Your network contains an on-premises Active Directory domain named corp.contoso.com.
You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com.
You sync all on-premises identities to Azure AD.
You need to prevent users who have a givenName attribute that starts with TEST from being synced to Azure AD. The solution must minimize administrative effort.
What should you use?

A. Synchronization Rules Editor
B. Web Service Configuration Tool
C. the Azure AD Connect wizard
D. Active Directory Users and Computers

Show Suggested Answer

Suggested Answer: A 🗳️

by AS007 at April 21, 2020, 5:09 a.m.

Comments

Submit Cancel

AS007

Highly Voted 4 years ago

Correct Answer

upvoted 28 times

...

mackc13

Highly Voted 3 years, 10 months ago

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-change-the-configuration Answer is correct

upvoted 9 times

...

stonwall12

Most Recent 2 months, 2 weeks ago

Selected Answer: A

Answer: A, Synchronization Rules Editor Reason: The Synchronization Rules Editor is the correct tool for creating custom filtering rules based on LDAP attributes like givenName. It allows you to create a scoping filter that prevents users with specific attribute values from syncing to Azure AD without modifying the user objects themselves. Reference: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-change-the-configuration#create-an-attribute-based-filter

upvoted 1 times

...