HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.
You create the resources shown in the following table.



You create the Group Policy Objects (GPOs) shown in the following table.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named fabrikam.com. Fabrikam.com syncs with contoso.com.

In Sub1, you create a Microsoft Entra Domain Services domain configured as shown in the following table.

Which Microsoft Entra Connect feature should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table.



The domain has the Group Policy Objects (GPOs) shown in the following table.

Your network contains the domains shown in the following exhibit.



You need to establish trust relationships as shown in the following exhibit.

Your on-premises network contains a single-domain Active Directory Domain Services (AD DS) forest. You have an Azure AD tenant named contoso.com. The

AD DS forest syncs with the Azure AD tenant by using Azure AD Connect.

You need to ensure that users in the forest that have a custom attribute of NoSync are excluded from synchronization.

How should you configure the Azure AD Connect cloudFiltered attribute, and which tool should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.



The domain controllers do NOT have internet connectivity.

You plan to implement Azure AD Password Protection for the domain.

You need to deploy Azure AD Password Protection agents. The solution must meet the following requirements:

Your network contains two Active Directory Domain Services (AD DS) forests as shown in the following exhibit.



The forests contain the domain controllers shown in the following table.

Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

You plan to sync the domain with an Azure AD tenant by using Azure AD Connect cloud sync.

You need to meet the following requirements:

• Install the software required to sync the domain and Azure AD.
• Enable password hash synchronization.

What should you install, and what should you use to enable password hash synchronization? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.
 

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. The tenant contains a group named Group1 and the users shown in the following table.



Domain/OU filtering in Azure AD Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.)