Question
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the objects shown in the following table.
| Name | Type |
|---|---|
| User1 | User |
| Group1 | Universal security group |
| Group2 | Domain local security group |
| Computer1 | Computer |
You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect.
You need to ensure that all the objects can be used in Conditional Access policies.
What should you do?
- A. Select the Configure Hybrid Azure AD join option. Correct
- B. Change the scope of Group1 and Group2 to Global.
- C. Clear the Configure device writeback option.
- D. Change the scope of Group2 to Universal.
Explanation
Selecting the Configure Hybrid Azure AD join option allows on-premises computer accounts to register with Azure AD, enabling their use in Conditional Access policies. This ensures that all objects can be utilized within Azure AD's Conditional Access framework.
