Question
Your network contains an Active Directory forest named contoso.com that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com by using Azure AD Connect.
You need to prevent the synchronization of users who have the extensionAttribute15 attribute set to NoSync.
What should you do in Azure AD Connect?
- A. Create an inbound synchronization rule for the Windows Azure Active Directory connector.
- B. Configure a Full Import run profile.
- C. Create an inbound synchronization rule for the Active Directory Domain Services connector. Correct
- D. Configure an Export run profile.
Explanation
Attribute-based filtering is done with an inbound synchronization rule on the Active Directory connector: the rule has a scoping filter of extensionAttribute15 EQUAL NoSync and a transformation that sets cloudFiltered to True, so those users never reach the metaverse export to Azure AD. A rule on the Azure AD connector handles objects coming from the cloud, not from Active Directory. Run profiles only control when import, synchronization and export run; they cannot filter objects.
