During the Microsoft Entra Connect Sync installation, the administrator selects the 'Password hash synchronization' feature. What does this feature enable?

Users' passwords are stored in plain text in Microsoft Entra ID.

Users can sign in to Microsoft Entra ID using the same password as their on-premises account.

Users must use a different password for cloud services.

Users' on-premises passwords are changed to match their cloud password.

Contoso has a single on-premises Active Directory forest with 50,000 users. They plan to sync all users to Microsoft Entra ID using Microsoft Entra Connect Sync. The network team has implemented a firewall that only allows outbound HTTPS traffic to specific Microsoft endpoints. During the initial sync, the wizard fails at the 'Connect to Microsoft Entra ID' step with a timeout error. You have verified that the service account has the correct permissions. What should you do first?

Run IdFix again to ensure all directory attributes are clean before retrying the wizard.

Verify that the firewall allows outbound HTTPS to the required Microsoft Entra endpoints, including the specific URLs and IP ranges listed in the Microsoft documentation.

Open the Microsoft Entra Connect wizard and select 'Change the sign-in method' to switch from Password Hash Sync to Pass-through Authentication.

Reinstall Microsoft Entra Connect Sync with the 'Use existing SQL Server' option to bypass the default local database.

A company is planning to synchronize its on-premises Active Directory to Microsoft Entra ID. They have a single forest and want to use Microsoft Entra Connect Sync. They have not yet verified their domain in Microsoft Entra ID. What is the first step they should take?

Run IdFix to clean the directory.

Create a new Microsoft Entra tenant.

Install Microsoft Entra Connect Sync and run the wizard.

Add and verify the custom domain name in Microsoft Entra ID.

A company uses Microsoft Entra Connect Sync with Password Hash Sync. They need to add a new on-premises Active Directory forest to the existing sync topology. The new forest has a different UPN suffix that is already verified in Microsoft Entra ID. What should you do to include users from the new forest?

Use Microsoft Entra Cloud Sync to sync the new forest in parallel.

Run the Microsoft Entra Connect Sync wizard and select 'Add new forest' in the directory synchronization options.

Manually create the users in Microsoft Entra ID and then use soft matching to link them.

Install a separate Microsoft Entra Connect Sync server for the new forest.

Microsoft 365 Certified:Administrator Expert

Domain 2Objective 1

Implement and Manage Identity Synchronization with Microsoft Entra Tenant MS-102 Practice Questions (Page 1)

Part of the Implement and manage Microsoft Entra identity and access domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

25–30%of the exam

Questions 1–5

1foundation · medium
An organization wants to synchronize a small subset of users from a single on-premises Active Directory domain to Microsoft Entra ID with minimal infrastructure. Which Microsoft tool is designed for this scenario?
Select an answer first
2foundation · medium
During the Microsoft Entra Connect Sync installation, the administrator selects the 'Password hash synchronization' feature. What does this feature enable?
Select an answer first
3application · medium
Contoso has a single on-premises Active Directory forest with 50,000 users. They plan to sync all users to Microsoft Entra ID using Microsoft Entra Connect Sync. The network team has implemented a firewall that only allows outbound HTTPS traffic to specific Microsoft endpoints. During the initial sync, the wizard fails at the 'Connect to Microsoft Entra ID' step with a timeout error. You have verified that the service account has the correct permissions. What should you do first?
Select an answer first
4application · medium
A company is planning to synchronize its on-premises Active Directory to Microsoft Entra ID. They have a single forest and want to use Microsoft Entra Connect Sync. They have not yet verified their domain in Microsoft Entra ID. What is the first step they should take?
Select an answer first
5application · medium
A company uses Microsoft Entra Connect Sync with Password Hash Sync. They need to add a new on-premises Active Directory forest to the existing sync topology. The new forest has a different UPN suffix that is already verified in Microsoft Entra ID. What should you do to include users from the new forest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Implement and Manage Identity Synchronization with Microsoft Entra Tenant MS-102 Practice Questions (Page 1)

Questions 1–5

An organization wants to synchronize a small subset of users from a single on-premises Active Directory domain to Microsoft Entra ID with minimal infrastructure. Which Microsoft tool is designed for this scenario?

During the Microsoft Entra Connect Sync installation, the administrator selects the 'Password hash synchronization' feature. What does this feature enable?

A company is planning to synchronize its on-premises Active Directory to Microsoft Entra ID. They have a single forest and want to use Microsoft Entra Connect Sync. They have not yet verified their domain in Microsoft Entra ID. What is the first step they should take?

Keep studying — Implement and manage Microsoft Entra identity and access