70-158 · Question #67
You administer a Forefront Identity Manager (FIM) 2010 server in your company network. You create a new Active Directory Domain Services (AD DS) Management Agent. You also create the AD DS user…
The correct answer is B. Select the Enable Synchronization Rule Provisioning option. To synchronize FIM user accounts with AD DS using a configured AD DS Management Agent and synchronization rules, you must enable the option that allows these rules to provision accounts.
Question
Options
- ASelect the Password Synchronization option.
- BSelect the Enable Synchronization Rule Provisioning option.
- CEnable user management Management Policy Rules.
- DSelect the Enable metaverse rules extension and Enable Provisioning Rules Extension options.
How the community answered
(29 responses)- A3% (1)
- B83% (24)
- C3% (1)
- D10% (3)
Why each option
To synchronize FIM user accounts with AD DS using a configured AD DS Management Agent and synchronization rules, you must enable the option that allows these rules to provision accounts.
Password Synchronization is a separate feature for synchronizing user passwords, not for the provisioning and attribute synchronization of user accounts themselves.
Enabling 'Synchronization Rule Provisioning' on the AD DS Management Agent allows the declarative synchronization rules, which are part of the 'configuration triple,' to create, update, and delete user objects in Active Directory based on the defined logic. This option is essential for the FIM Metaverse to provision objects into the connected data source as dictated by the synchronization rules.
Management Policy Rules (MPRs) govern user interactions with the FIM Portal and workflow execution, but they do not directly enable the technical provisioning of accounts between the FIM Synchronization Service and connected directories.
While Metaverse Rules Extensions and Provisioning Rules Extensions are used for custom or advanced provisioning scenarios, the fundamental mechanism for enabling declarative synchronization rules to provision is the 'Enable Synchronization Rule Provisioning' checkbox, and the question implies using declarative rules via the 'configuration triple'.
Concept tested: FIM 2010 Management Agent provisioning configuration
Topics
Community Discussion
No community discussion yet for this question.