Microsoft Azure Security Technologies (AZ-500)

What must be done to ensure that only specific attributes are synchronized to Azure AD?

1. Modify user account attributes

2. Utilize Azure AD Connect Sync rules

3. Change identity types

4. Complete a domain join

The correct answer is: Utilize Azure AD Connect Sync rules

To ensure that only specific attributes are synchronized to Azure Active Directory (Azure AD), leveraging Azure AD Connect Sync rules is essential. Azure AD Connect allows organizations to synchronize their on-premises directories with Azure AD, and Sync rules provide granular control over which attributes are included in the synchronization process. By using Sync rules, an administrator can define synchronization criteria, such as filtering user attributes based on certain conditions. This is particularly important for organizations that want to limit the exposure of sensitive information or reduce the number of synchronized attributes to only those that are necessary for their cloud applications and services. The ability to tailor the synchronization process helps to maintain security and compliance with organizational policies. In contrast, modifying user account attributes affects the information stored in the user accounts themselves but does not directly manage which attributes are synchronized. Changing identity types and completing a domain join are related to identity management and connectivity setups but are not mechanisms for controlling attribute synchronization in the context of Azure AD.