nerdexam
Microsoft

SC-300 · Question #409

Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains the identities shown in the following table. You have a…

The correct answer is Contoso\User1 syncs from contoso.com to the tenant. = Yes; Contoso\User2 syncs from contoso.com to the tenant. = No; Contoso\Group1 syncs from contoso.com to the tenant. = Yes. In Microsoft Entra Cloud Sync, when a scoping filter is configured using a group DN (CN=Group1,OU=OU1,DC=contoso,DC=com), only the members of that group and the group itself are synchronized to the Entra tenant. Contoso\User1 is a member of Group1, so it syncs (Yes). The group…

Submitted by stefanr· Mar 6, 2026Implement and manage identity synchronization between on-premises AD DS and Microsoft Entra ID (formerly Azure AD Connect / Cloud Sync configuration)

Question

Hotspot Question Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains the identities shown in the following table. You have a Microsoft Entra tenant that contains a user named User1. You deploy Microsoft Entra Cloud Sync and configure a scoping filter by using the following string: CN=Group1,OU=OU1,DC=contoso,DC=com. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

SC-300 question #409 exhibit

Answer Area

  • Contoso\User1 syncs from contoso.com to the tenant.Yes
  • Contoso\User2 syncs from contoso.com to the tenant.No
  • Contoso\Group1 syncs from contoso.com to the tenant.Yes

Explanation

In Microsoft Entra Cloud Sync, when a scoping filter is configured using a group DN (CN=Group1,OU=OU1,DC=contoso,DC=com), only the members of that group and the group itself are synchronized to the Entra tenant. Contoso\User1 is a member of Group1, so it syncs (Yes). The group object Group1 itself is also synchronized as part of the scoping (Yes). Contoso\User2 is not a member of Group1, so it falls outside the scoping filter and does not sync (No).

Topics

#Microsoft Entra Cloud Sync#Scoping Filters#Identity Synchronization#Active Directory

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice