nerdexam
Microsoft

AZ-801 · Question #130

You establish synchronization between an AD DS and Azure AD environments. Users whose accounts are synced were able to sign in, but none of them could access cloud resources. What could be the…

The correct answer is C. The users don't have licenses assigned for cloud apps. Azure AD Connect doesn't sync licenses, and you being the administrator must manage these licenses manually. Azure AD Connect synchronizes identity attributes but not license assignments; administrators must manually manage cloud app licenses for synced users in Azure AD.

Monitor and troubleshoot Windows Server environments

Question

You establish synchronization between an AD DS and Azure AD environments. Users whose accounts are synced were able to sign in, but none of them could access cloud resources. What could be the problem?

Options

  • AThe users don't have licenses assigned for cloud apps. You being the administrator must select the option to sync licenses across
  • BThe users don't have licenses assigned for cloud apps. These users can't be synced
  • CThe users don't have licenses assigned for cloud apps. Azure AD Connect doesn't sync licenses, and you being the administrator must manage these licenses manually
  • DNone of these

How the community answered

(34 responses)
  • A
    15% (5)
  • B
    3% (1)
  • C
    76% (26)
  • D
    6% (2)

Why each option

Azure AD Connect synchronizes identity attributes but not license assignments; administrators must manually manage cloud app licenses for synced users in Azure AD.

AThe users don't have licenses assigned for cloud apps. You being the administrator must select the option to sync licenses across

There is no option within Azure AD Connect to synchronize license assignments; license management is handled entirely in the Azure AD or Microsoft 365 admin portal.

BThe users don't have licenses assigned for cloud apps. These users can't be synced

Synced users can successfully access cloud resources once licenses are assigned; lack of license sync does not prevent accounts from being created or synchronized in Azure AD.

CThe users don't have licenses assigned for cloud apps. Azure AD Connect doesn't sync licenses, and you being the administrator must manage these licenses manuallyCorrect

Azure AD Connect replicates identity attributes such as usernames, password hashes, and group memberships from on-premises AD DS to Azure AD, but license assignments for cloud services are managed exclusively within Azure AD and must be assigned manually by an administrator or through group-based licensing - they are never synchronized by Azure AD Connect.

DNone of these

Concept tested: Azure AD Connect license synchronization limitations

Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/whatis-azure-ad-connect

Topics

#Azure AD Connect#Hybrid Identity#License Management#Cloud Resource Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-801 Practice