Your network contains two on-premises Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com that are connected by using a forest trust. You have a Microsoft 365 E5…

The correct answer is C. Microsoft Entra Connect Sync. Microsoft Entra Connect Sync (C) - formerly Azure AD Connect - supports syncing from multiple on-premises AD DS forests to a single Entra tenant, attribute-based filtering to sync only a subset of users, and device writeback (syncing Entra-registered devices back to on-premises…

Submitted by anjalisingh· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

Your network contains two on-premises Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com that are connected by using a forest trust. You have a Microsoft 365 E5 subscription. You need to sync a subset of users from both forests to Microsoft Entra. The solution must support device objects and device writeback. What should you use?

Options

AMicrosoft Entra Cloud Sync
BMicrosoft Entra Domain Services
CMicrosoft Entra Connect Sync
DActive Directory Federation Services (AD FS)

How the community answered

(22 responses)

A
5% (1)
B
23% (5)
C
64% (14)
D
9% (2)

Explanation

Microsoft Entra Connect Sync (C) - formerly Azure AD Connect - supports syncing from multiple on-premises AD DS forests to a single Entra tenant, attribute-based filtering to sync only a subset of users, and device writeback (syncing Entra-registered devices back to on-premises AD). Microsoft Entra Cloud Sync (A) does not support device writeback and has limited multi-forest topology support. Microsoft Entra Domain Services (B) is a managed domain PaaS offering, not a sync engine. AD FS (D) provides federated authentication but does not sync directory objects.

Topics

#Microsoft Entra Connect#Device Sync#Multi-forest AD DS#Selective Sync

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice