nerdexam

70-158 · Question #34

Hotspot Question You deploy Forefront Identity Manager (FIM) 2010 in your company network to provide an identity management solution between Active Directory Domain Services (AD DS) and enterprise…

The correct answer is Users must be disabled in AD. = Yes; Contacts must be deleted. = Yes; Memberships of groups must be removed. = Yes. In FIM 2010, the AD MA deprovisioning settings allow granular control over what happens to connector space objects when their metaverse counterpart is deleted. The requirement specifies three distinct actions: disabling users (rather than deleting them), deleting contacts, and…

Submitted by obi.ng· Mar 4, 2026Configuring and Managing Identity Synchronization and Deprovisioning in FIM 2010 / Microsoft Identity Management

Question

Hotspot Question You deploy Forefront Identity Manager (FIM) 2010 in your company network to provide an identity management solution between Active Directory Domain Services (AD DS) and enterprise HR applications. You create an Active Directory Management Agent (AD MA) to manage users and groups between the two directory services. You need to ensure that when a metaverse object is deleted, orphaned objects must be processed according to the following requirements: - Users must be disabled in AD. Contacts must be deleted. - Memberships of groups must be removed. Which deprovisioning option should you use on the AD MA? (To answer, configure the appropriate option or options in the dialog box in the answer area.) Answer:

Exhibit

70-158 question #34 exhibit

Answer Area

  • Users must be disabled in AD.Yes
  • Contacts must be deleted.Yes
  • Memberships of groups must be removed.Yes

Explanation

In FIM 2010, the AD MA deprovisioning settings allow granular control over what happens to connector space objects when their metaverse counterpart is deleted. The requirement specifies three distinct actions: disabling users (rather than deleting them), deleting contacts, and removing group memberships - all of which are supported deprovisioning options within the AD MA configuration dialog. Selecting all three options ('Yes' for each) ensures that each object type is handled according to its specific business rule, rather than applying a single blanket action like 'delete' or 'make them disconnectors' to all object types.

Topics

#Forefront Identity Manager 2010#Deprovisioning#Active Directory Management Agent#Identity Lifecycle Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-158 Practice