Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A multinational corporation has a hybrid identity environment with users provisioned from on-premises Active Directory to Microsoft Entra ID. They need to ensure that when a user's account is disabled in the on-premises Active Directory, their access to Microsoft 365 services is automatically revoked. Which Microsoft Entra capability facilitates this synchronization?
- AMicrosoft Entra Connect Sync
- BMicrosoft Entra Domain Services
- CMicrosoft Entra Application Proxy
- DMicrosoft Entra B2B collaboration
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Connect Sync
Microsoft Entra Connect Sync is specifically designed to synchronize identity data, including user account status (like enabled/disabled), from on-premises Active Directory to Microsoft Entra ID, ensuring consistency across the hybrid environment.
Why the other options are wrong
- B. Domain Services provides managed domain services in Azure, not synchronization for hybrid identity.
- C. Application Proxy publishes on-premises web apps, not synchronizes user attributes.
- D. B2B collaboration manages external guest users, not synchronization with on-premises AD.
Microsoft Entra Connect Sync
A component of Microsoft Entra Connect that synchronizes identity data between on-premises Active Directory and Microsoft Entra ID.
- Ensures identity consistency across hybrid environments.
- Synchronizes users, groups, contacts, and device objects.
- Handles password hash synchronization or pass-through authentication.
Memory trick: Entra Connect Sync is the bridge builder between your on-premises and cloud identities.