MS-102 Question 33

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  YYY - User1, User2, and Group2 are all in OU1. OU1 is selected to sync. The group-based filtering will not work for the SalesOU/Group1 because the SalesOU is not included in the previous page for Domain/OU filtering. Since the SalesOU was not included in the Domain/OU filtering page, it will not be synced, period. "If you plan to use group-based filtering, then make sure the OU with the group is included and isn't filtered by using OU-filtering. OU filtering is evaluated before group-based filtering is evaluated." https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-install-custom#sync-filtering-based-on-groups "When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included." https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-configure-filtering

• 2

  In Microsoft Entra ID, filtering policies generally take precedence over domain and OU filtering, though the specific order can depend on the type of filtering and the policies in place. So Y N N

• 2

  Yes No Yes User1 as OU filtering AND Group membership User2 as OU filtering but NOT in sync Group Group2 as OU filtering AND Group membership