MS-102 Question #147: Real Exam Question with Answer & Explanation

Question

Your network contains an Active Directory domain named adatum.com that is synced to Azure AD. The domain contains 100 user accounts. The city attribute for all the users is set to the city where the user resides. You need to modify the value of the city attribute to the three-letter airport code of each city. What should you do?

Options

• AFrom Azure Cloud Shell, run the Get-MsolUser and Set-MsolUser cmdlets.
• BFrom Windows PowerShell on a domain controller, run the Get-MgUser and Update-MgUser
• CFrom Active Directory Administrative Center, select the Active Directory users, and then modify
• DFrom Azure Cloud Shell, run the Get-MgUser and Update-MgUser cmdlets.

Explanation

Because the domain is synced to Azure AD via Azure AD Connect, the authoritative source for user attributes like 'city' is the on-premises Active Directory. Any changes made directly in Azure AD would be overwritten on the next sync cycle. Therefore, changes must be made in on-premises AD. Active Directory Administrative Center (ADAC) is a GUI tool available on domain controllers that allows administrators to select multiple users and bulk-modify attributes - making it ideal for this task. Using Get-MsolUser/Set-MsolUser or Get-MgUser/Update-MgUser in Azure Cloud Shell (options A and D) targets Azure AD directly, and those changes would be reverted by the next sync. Running Get-MgUser/Update-MgUser on a domain controller (B) also targets Azure AD, not the on-premises directory.

No community discussion yet for this question.