Directory Synchronization With Azure AD Cloud Sync

Question 1

What are the four supported topologies for Azure AD Connect Cloud Sync?

Answer 1

Single on-prem forest with a single Azure AD Tenant.
Multiple on-prem forests with a single Azure AD Tenant.
Existing on-prem forest with Azure AD Connect and a new forest with Cloud provisioning.
Piloting topology with both Azure AD Connect and Azure AD Connect Cloud Sync in the same forest.

Question 2

What is the purpose of the group Managed Service Account in Azure AD Connect Cloud Sync?

Answer 2

The group Managed Service Account is used by Cloud Sync to run the Cloud Sync agent. It provides automatic password management, simplified service principal name management, and allows for management delegation to other administrators.

Question 3

What credentials are required to create the Azure AD Connect Cloud Sync group Managed Service Account?

Answer 3

Domain Administrator or Enterprise Administrator credentials are required to create the group Managed Service Account.

Question 4

What is the recommended number of active Cloud Sync agents for high availability?

Answer 4

Microsoft recommends deploying three active agents to achieve high availability in Azure AD Connect Cloud Sync.

Question 5

What ports need to be open in the firewall for Azure AD Connect Cloud Sync?

Answer 5

The agents must be able to make outbound requests to Azure AD over port 80 and port 443.