Skip to main content
Answer confirmed
Question

Your on-premises network contains an Active Directory domain named contoso.com. You have an Azure AD tenant.

You plan to sync contoso.com with the Azure AD tenant by using Azure AD Connect cloud sync.

You need to create an account that will be used by Azure AD Connect cloud sync.

Which type of account should you create?

Proposed answer
  • A. system-assigned managed identity
  • B. group managed service account (gMSA)
  • C. user
  • D. InetOrgPerson
Suggested answer
  • B. group managed service account (gMSA)
Correct answer

The suggested answer is correct

Reference

Comments
Krayzr

2 months, 3 weeks ago 

Selected Answer: B

B.) gMSa https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-prerequisites

upvoted 1 times 

JackBauer

1 year, 1 month ago 

Managed Service Account is recommended. the local user account is for 2017-2021 / Legacy. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/concept-adsync-service-account

upvoted 2 times 

examesmsft

1 year, 4 months ago 

Looks like correct, follow the step by step: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/how-to-install

upvoted 3 times 

sacz

1 year, 4 months ago 

Seems correct ans is C

upvoted 2 times 

Maup33

1 year, 4 months ago 

B. You need the following to use Azure AD Connect cloud sync: Domain Administrator or Enterprise Administrator credentials to create the Azure AD Connect Cloud Sync gMSA (group Managed Service Account) to run the agent service. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/how-to-prerequisites?tabs=public-cloud

upvoted 4 times 

franyotron

1 year, 5 months ago 

Correct. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/how-to-prerequisites?tabs=public-cloud

upvoted 4 times 

skycrap

1 year, 5 months ago 

Not sure: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/reference-connect-accounts-permissions

upvoted 1 times