Microsoft Security, Compliance, and Identity Fundamentals — Question 227

In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?

Answer options

• A. Active Directory Federation Services (AD FS)
• B. Microsoft Sentinel
• C. Azure AD Connect
• D. Azure AD Privileged Identity Management (PIM)

Correct answer: C

Explanation

Azure AD Connect is specifically designed to facilitate the synchronization of identities between AD DS and Azure AD, making it the correct choice. Active Directory Federation Services (AD FS) is used for authentication, not for syncing identities. Microsoft Sentinel is a security information and event management solution, and Azure AD Privileged Identity Management (PIM) is focused on managing and controlling privileged access, neither of which are used for identity synchronization.