nerdexam

70-158 · Question #46

You deploy Forefront Identity Manager (FIM) 2010 in your company network. You configure Active Directory Domain Services (AD DS) and a Microsoft SQL Server database as data sources for a metaverse…

The correct answer is A. FIM has an inbound attribute flow from the SQL Server database. The attribute data flow issue occurs because an inbound synchronization rule from the SQL Server database re-populates the FIM metaverse with the SQL value, overriding the deletion attempted from Active Directory.

Submitted by zhang_li· Mar 4, 2026Configuring the FIM Synchronization Service

Question

You deploy Forefront Identity Manager (FIM) 2010 in your company network. You configure Active Directory Domain Services (AD DS) and a Microsoft SQL Server database as data sources for a metaverse person object attribute named department. You configure outbound synchronization rules for the attribute for both data sources. When you assign a value to the attribute for a user object in the Active Directory domain, the attribute is successfully updated in the SQL Server database. However, when you delete the attribute data from a user object in the domain, the value of the attribute is replaced with the attribute data from the SQL Server database. You need to ensure that the attribute data is deleted from the SQL Server database after the deletion of the attribute data from the domain. Which describes the cause of the attribute data flow issue?

Options

  • AFIM has an inbound attribute flow from the SQL Server database.
  • BOutbound attribute flow to the domain prevents the flow of null data for the attribute.
  • CThe Management Agent (MA) for the SQL Server database has higher attribute flow precedence
  • DThe Management Agent (MA) for the Active Directory domain has higher attribute flow precedence

How the community answered

(16 responses)
  • A
    56% (9)
  • B
    19% (3)
  • C
    19% (3)
  • D
    6% (1)

Why each option

The attribute data flow issue occurs because an inbound synchronization rule from the SQL Server database re-populates the FIM metaverse with the SQL value, overriding the deletion attempted from Active Directory.

AFIM has an inbound attribute flow from the SQL Server database.Correct

When the attribute is deleted in Active Directory, the FIM metaverse object attempts to reflect this change (a null value). However, an active inbound attribute flow from the SQL Server database will then assert the non-null value from SQL back into the metaverse, overriding the deletion and preventing it from being propagated outbound to SQL.

BOutbound attribute flow to the domain prevents the flow of null data for the attribute.

The problem describes an issue with data flowing from the domain to SQL Server, not an outbound flow to the domain preventing null data, which is irrelevant to the scenario.

CThe Management Agent (MA) for the SQL Server database has higher attribute flow precedence

While attribute flow precedence is important, the fundamental cause here is the existence of an inbound flow from SQL Server that actively re-populates the attribute, rather than just its precedence during initial conflict resolution between multiple sources.

DThe Management Agent (MA) for the Active Directory domain has higher attribute flow precedence

If the Active Directory Management Agent had higher precedence, its deletion (null value) would win in the metaverse, causing the attribute to be deleted in SQL Server, which is the desired outcome and not the cause of the problem.

Concept tested: FIM/MIM inbound attribute flow and synchronization conflict resolution

Source: https://docs.microsoft.com/en-us/microsoft-identity-manager/reference/fim-attribute-flow-rules

Topics

#Attribute Flow#Synchronization Rules#Management Agents#Metaverse

Community Discussion

No community discussion yet for this question.

Full 70-158 Practice