Microsoft Azure Architect Technologies (2020, legacy) — Question 100

You have the following Azure Active Directory (Azure AD) tenants:
✑ Contoso.onmicrosoft.com: Linked to a Microsoft 365 tenant and syncs to an Active Directory forest named contoso.com by using password hash synchronization
✑ Contosoazure.onmicrosoft.com: Linked to an Azure subscription named Subscription1
You need to ensure that you can assign the users in contoso.com access to the resources in Subscription1.
What should you do?

Answer options

• A. Create an Azure management group that contains Subscription1.
• B. Configure the existing Azure AD Connect server to sync contoso.com to contosoazure.onmicrosoft.com.
• C. Deploy a second Azure AD Connect server and sync contoso.com to contosoazure.onmicrosoft.com.
• D. Create guest accounts for all the contoso.com users in contosoazure.onmicrosoft.com.

Correct answer: C

Explanation

The correct answer is C because deploying a second Azure AD Connect server allows for the proper synchronization of the contoso.com users to the contosoazure.onmicrosoft.com tenant, enabling access to Subscription1 resources. Option A does not provide user access, option B would not achieve the desired user synchronization, and option D, while providing guest access, is not the most efficient method for enabling resources access for all users.