Correct Answer:

Box 1: Active Directory Migration Tool

The Active Directory Migration Tool (ADMT) is a Microsoft software application that helps you manage and perform the necessary operations to move AD objects. You can move objects within the same domain forest (intraforest) or to a

different forest (interforest).

Box 2: Azure AD Connect

Use Azure AD Connect to automatically synchronize identity data between their on-premises Active Directory environment and Azure AD. That way, users can use the same credentials to access both on-premises applications and cloud

services such as Microsoft 365.

Azure AD Connect can synchronize the user accounts, groups and credential hashes in your on-premises AD. Most attributes of the user accounts, such as the User Principal Name (UPN) and security identifier (SID), are synchronized.

However, the following objects and attributes are NOT synchronized:

*

Computer objects for computers joined to the on-premises AD environment

*

Etc.

Incorrect:

Azure Active Directory Connect cloud sync FAQ. What does it mean that Exchange hybrid is not supported?

The Exchange Hybrid Deployment feature allows for the co-existence of Exchange mailboxes both on-premises and in Microsoft 365. Azure AD Connect is synchronizing a specific set of attributes from Azure AD back into your on-premises

directory. The cloud provisioning agent currently does not synchronize these attributes back into your on-premises directory and thus it is not supported as a replacement for Azure AD Connect.

Box 3: Azure AD Connect Cloud Sync

Azure AD Connect cloud sync is a new offering from Microsoft designed to meet and accomplish your hybrid identity goals for synchronization of users, groups, and contacts to Azure AD. It accomplishes this by using the Azure AD cloud

provisioning agent instead of the Azure AD Connect application.

Reference: https://www.varonis.com/blog/active-directory-migration-tool

https://docs.microsoft.com/en-us/azure/active-directory/cloud-sync/reference-cloud-sync-faq#what-does-it-mean-that-exchange-hybrid-is-not-supportedhttps://blog.quest.com/azure-ad-connect-how-it-works-and-best-practices-for-synchronizing-your-data/

https://docs.microsoft.com/en-us/azure/active-directory/cloud-sync/what-is-cloud-sync

Correct Answer:

If you added the contoso.com and east.contoso.com domains as custom domains in Microsoft 365, then the users would be assigned their user principle names as Microsoft 365 usernames. However, the question does not state that you have added the domains as custom domains. Therefore, both users will use the default @fabrikam.onmicrosoft.com domain for their usernames.

Correct Answer: C

Group-based licensing currently does not support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied. Therefore, User2 will not be assigned a license.

When Azure AD assigns group licenses, any users without a specified usage location inherit the location of the directory. Therefore, User3 will be assigned a license and his usage location will be set to the location of the directory.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced

Correct Answer: B

An app configuration setting, for example, might require you to specify any of the following details:

1.

A custom port number

2.

Language settings

3.

Security settings

4.

Branding settings such as a company logo

Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

Correct Answer: B