SC-300 Question #114: Real Exam Question with Answer & Explanation

Question

Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. For which users can you configure the Job title property and the Usage location property in Azure AD? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Options

• __typehotspot
• variantdropdown

Explanation

This question tests your knowledge of which Azure AD user properties can be edited depending on the user's source (cloud-native vs. synchronized from on-premises Active Directory). Certain properties are managed in the on-premises AD and synced to Azure AD, making them read-only in the Azure AD portal.

Approach. In Azure AD, 'Job title' is an attribute that is writable for cloud-only users but is synchronized (and therefore read-only in Azure AD) for users whose source is 'Windows Server AD' (on-premises AD sync via Azure AD Connect). 'Usage location' is a property that can be edited in Azure AD regardless of the user's source - it is not synchronized from on-premises AD and must be set in Azure AD. Therefore: for cloud-only users (Source = Azure Active Directory), BOTH Job title and Usage location can be configured. For synced users (Source = Windows Server AD), only Usage location can be configured in Azure AD - Job title must be changed in the on-premises AD and will sync to Azure AD. The key distinction is: synchronized attributes from on-premises AD are read-only in Azure AD, while cloud-managed attributes like Usage location remain editable in Azure AD for all user types.

Concept tested. Azure AD user property editability based on user source (cloud-only vs. on-premises AD synchronized users). Specifically, understanding which attributes are controlled by Azure AD Connect sync and are therefore read-only in the Azure AD portal versus which attributes are always managed in Azure AD.

Reference. https://learn.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized

No community discussion yet for this question.