Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A company is implementing Microsoft Entra Connect Cloud Sync to synchronize users from a subset of organizational units (OUs) in their on-premises Active Directory to Microsoft Entra ID. They need to ensure that only users from the 'Sales' and 'Marketing' OUs are synchronized. Which component of Cloud Sync allows you to define these specific OUs for synchronization?
- ADomain and OU filtering
- BSynchronization rules
- CScope filters
- DAttribute mappings
Show answer & explanationAnswer & explanation
Correct answer: A. Domain and OU filtering
In Microsoft Entra Connect Cloud Sync, 'Domain and OU filtering' is the explicit configuration setting that allows you to select specific on-premises domains and organizational units from which to synchronize users, groups, and contacts.
Why the other options are wrong
- B. Synchronization rules are part of the traditional Microsoft Entra Connect sync engine, not Cloud Sync's primary method for OU filtering.
- C. Scope filters are a broader term that includes OU filtering, but 'Domain and OU filtering' is the precise terminology used in Cloud Sync for this purpose.
- D. Attribute mappings define how attributes are transformed or flowed, not which objects are synchronized.
Cloud Sync Domain and OU Filtering
A configuration option in Microsoft Entra Connect Cloud Sync that specifies which on-premises Active Directory domains and Organizational Units (OUs) are included in the synchronization scope.
- Allows granular control over which objects are synchronized to Microsoft Entra ID.
- Helps reduce the number of objects synchronized, improving performance and security.
- Configured during the initial setup or modification of a Cloud Sync configuration.
Memory trick: Filter Cloud Sync, Choose Your OUs.