Microsoft Exam AZ-500 Topic 3 Question 70 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 70
Topic #: 3

Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.

After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not be allowed to sync to

Azure AD.

Which of the following actions should you take?

AYou should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.

BYou should configure a DNAT rule on the Firewall.

CB. You should configure a network traffic filtering rule on the Firewall.

DYou should make use of Active Directory Users and Computers to create an attribute-based filtering rule.

Show Suggested Answer

Suggested Answer: A

by Desirae at Sep 14, 2024, 11:21 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aleta

2 days ago

I'm not sure about that. Maybe we should consider using Active Directory Users and Computers instead.

upvoted 0 times

...

Stephane

4 days ago

I agree with Lauryn. That seems like the most appropriate action to take in this scenario.

upvoted 0 times

...

Lauryn

6 days ago

I think we should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.

upvoted 0 times

...

Margurite

9 days ago

The Synchronization Rules Editor is definitely the way to go here. I've used it before to filter user attributes, and it's super straightforward.

upvoted 0 times

...