nerdexam
MicrosoftMicrosoft

AZ-500 · Question #311

AZ-500 Question #311: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-500 to reveal the answer and full explanation for question #311. The question stem and answer options stay visible for context.

Submitted by satoshi_tk· Mar 6, 2026Secure identity and access

Question

Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name. After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not be allowed to sync to Azure AD. Which of the following actions should you take?

Options

  • AYou should make use of the Synchronization Rules Editor to create an attribute-based filtering
  • BYou should configure a DNAT rule on the Firewall.
  • CYou should configure a network traffic filtering rule on the Firewall.
  • DYou should make use of Active Directory Users and Computers to create an attribute-based

Unlock AZ-500 to see the answer

You've previewed enough free AZ-500 questions. Unlock AZ-500 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full AZ-500 PracticeBrowse All AZ-500 Questions