70-158 · Question #46
You deploy Forefront Identity Manager (FIM) 2010 in your company network. You configure Active Directory Domain Services (AD DS) and a Microsoft SQL Server database as data sources for a metaverse…
The correct answer is A. FIM has an inbound attribute flow from the SQL Server database. The attribute data flow issue occurs because an inbound synchronization rule from the SQL Server database re-populates the FIM metaverse with the SQL value, overriding the deletion attempted from Active Directory.
Question
Options
- AFIM has an inbound attribute flow from the SQL Server database.
- BOutbound attribute flow to the domain prevents the flow of null data for the attribute.
- CThe Management Agent (MA) for the SQL Server database has higher attribute flow precedence
- DThe Management Agent (MA) for the Active Directory domain has higher attribute flow precedence
How the community answered
(16 responses)- A56% (9)
- B19% (3)
- C19% (3)
- D6% (1)
Why each option
The attribute data flow issue occurs because an inbound synchronization rule from the SQL Server database re-populates the FIM metaverse with the SQL value, overriding the deletion attempted from Active Directory.
When the attribute is deleted in Active Directory, the FIM metaverse object attempts to reflect this change (a null value). However, an active inbound attribute flow from the SQL Server database will then assert the non-null value from SQL back into the metaverse, overriding the deletion and preventing it from being propagated outbound to SQL.
The problem describes an issue with data flowing from the domain to SQL Server, not an outbound flow to the domain preventing null data, which is irrelevant to the scenario.
While attribute flow precedence is important, the fundamental cause here is the existence of an inbound flow from SQL Server that actively re-populates the attribute, rather than just its precedence during initial conflict resolution between multiple sources.
If the Active Directory Management Agent had higher precedence, its deletion (null value) would win in the metaverse, causing the attribute to be deleted in SQL Server, which is the desired outcome and not the cause of the problem.
Concept tested: FIM/MIM inbound attribute flow and synchronization conflict resolution
Source: https://docs.microsoft.com/en-us/microsoft-identity-manager/reference/fim-attribute-flow-rules
Topics
Community Discussion
No community discussion yet for this question.