Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDHard
A company is planning to deploy Microsoft Entra Connect Cloud Sync to synchronize users from an on-premises Active Directory domain to Microsoft Entra ID. The domain controller is running Windows Server 2012 R2. Which of the following is a prerequisite for deploying Microsoft Entra Connect Cloud Sync agents?
- AA dedicated service account with Enterprise Admin permissions is required.
- BThe domain controller must be running Windows Server 2016 or later.
- COutbound connectivity to *.msappproxy.net on port 443.
- DThe server must have SQL Server installed.
Show answer & explanationAnswer & explanation
Correct answer: B. The domain controller must be running Windows Server 2016 or later.
Microsoft Entra Connect Cloud Sync agents require a domain controller (or a member server) running Windows Server 2016 or later. Windows Server 2012 R2 is not supported for the Cloud Sync agent installation, which makes option B the correct answer.
Why the other options are wrong
- A. While service accounts are needed, Enterprise Admin permissions are typically not required, and dedicated service accounts are part of best practices, not a strict technical prerequisite for the server OS version.
- C. This is a prerequisite for Microsoft Entra Application Proxy, not Cloud Sync agents directly for their operational connectivity, though Cloud Sync does require outbound access to specific Microsoft 365 URLs/IP ranges on 443.
- D. Cloud Sync agents do not require SQL Server; they use an embedded database.
Microsoft Entra Connect Cloud Sync Prerequisites
Microsoft Entra Connect Cloud Sync has specific prerequisites for its agent installation, primarily concerning the operating system version and network connectivity.
- Requires Windows Server 2016 or later for agent host.
- Outbound connectivity to specific Microsoft Entra ID and M365 URLs on port 443.
- Does not require SQL Server; uses an embedded database.
Memory trick: Cloud Sync needs a newer Server OS, outbound connectivity, and no SQL.