Question

How can you prevent certain OUs or Groups from being synchronized to your Office 365 tenant?

a) Exclude-OUSync -OU
b) Disable-GroupSync -Group
c) Block-Sync -OU -Group
d) Filter-SyncedObjects -Exclude

Answer 1

In Azure Active Directory Connect, use the d. 'Filter-SyncedObjects -Exclude' option to filter and prevent specific OUs or Groups from being synchronized to Office 365.

Step-by-step explanation:

To prevent certain Organizational Units (OUs) or Groups from being synchronized to your Office 365 tenant, you would use filtering options available in the Azure Active Directory Connect tool. The correct option from the ones listed is d) Filter-SyncedObjects -Exclude. By configuring the synchronization settings, you can establish filtering rules that define which objects should or should not be synchronized to Azure AD. Keep in mind that these filtration settings should be configured with care to prevent unintended access issues or information loss in your Office 365 environment.

The correct answer is option d) Filter-SyncedObjects -Exclude. By using the Filter-SyncedObjects cmdlet with the -Exclude parameter, you can prevent certain OUs or groups from being synchronized to your Office 365 tenant.

For example, you can run the following command to exclude a specific OU from synchronization:

Filter-SyncedObjects -Exclude 'OU=Marketing,DC=contoso,DC=com'

This command would exclude the 'Marketing' OU from being synchronized.