무료 온라인 액세스 Microsoft.MS-102-KR.v2026-04-06.q249 모의 시험 (Page 37)

MS-102-KR 문제 176

Device1이라는 Windows 11 장치가 포함된 Microsoft 365 E5 구독이 있습니다.
Device1은 Microsoft Defender for Endpoint에 등록되었습니다.
Device1이 IP 주소 131.107.10.15에 연결되는 것을 차단해야 합니다.
Microsoft Defender 엔드포인트 설정에서 무엇을 구성해야 하나요? 답변하려면 답변 영역에서 적절한 설정을 선택하세요.
참고: 정답 하나당 1점입니다.

MS-102-KR 문제 177

Microsoft 365 구독이 있습니다.
구독에 onmicrosoft.com 접미사가 붙은 추가 도메인을 추가해야 합니다. 추가 도메인은 사용자의 이메일 주소로 할당 가능해야 합니다.
구독에 포함될 수 있는 onmicrosoft.com 도메인의 최대 수는 얼마입니까?

A. 10

B. 2

C. 1

D. 5

MS-102-KR 문제 178

(귀하의 네트워크에는 contoso라는 이름의 온프레미스 Active Directory 도메인 서비스(AD DS) 포리스트가 두 개 있습니다.)
com과 fabrikam.com은 산림 신탁을 통해 연결되어 있습니다.
귀하는 Microsoft 365 E5 구독을 보유하고 있습니다.
두 포리스트에서 일부 사용자를 Microsoft Entra ID와 동기화해야 합니다. 솔루션은 장치 개체 및 장치 쓰기 기능을 지원해야 합니다.
무엇을 사용해야 할까요?)

A. Microsoft Entra 클라우드 동기화

B. 마이크로소프트 엔트리 도메인 서비스

C. Microsoft Entra Connect 동기화

D. 액티브 디렉터리 페더레이션 서비스(AD FS)

정답: C

Comprehensive and Detailed Explanation From Exact Extract of Microsoft 365 Admin documents guides:
The correct answer is Microsoft Entra Connect Sync because it is the only Microsoft-supported solution that meets all of the stated requirements.
1. Support for multiple on-premises AD DS forests
Microsoft Entra Connect Sync is designed to synchronize identities from multiple on-premises Active Directory forests into a single Microsoft Entra tenant. Microsoft documentation explicitly states that when multiple forests are present, they can all be synchronized as long as they are reachable by the same Entra Connect server. A forest trust between contoso.com and fabrikam.com is a supported and common configuration.
2. Ability to sync only a subset of users
Microsoft Entra Connect Sync supports filtering and scoping at multiple levels (domain-based, OU-based, or attribute-based). Microsoft documentation lists pilot deployments and limited user synchronization as a primary use case, allowing administrators to synchronize only selected users from each forest.
3. Support for device objects and hybrid device scenarios
Microsoft Entra Connect Sync supports hybrid device identity, including Microsoft Entra hybrid joined devices. These devices are registered both in on-premises Active Directory and in Microsoft Entra ID, which is required for many Microsoft 365 and Conditional Access scenarios.
4. Device writeback support
Device writeback is a feature that allows device objects from Microsoft Entra ID to be written back into on- premises Active Directory. Microsoft documentation clearly identifies device writeback as a feature of Microsoft Entra Connect Sync.
Important documented behavior:
* Device writeback is supported when device objects and users are correctly located and configured in the same forest.
* Device writeback is not a feature of Cloud Sync or federation services.
Why the other options are incorrect
A). Microsoft Entra Cloud Sync
Cloud Sync is a lightweight provisioning agent and does not provide the full hybrid identity feature set required for this scenario. Microsoft documentation associates advanced device features and device writeback with Microsoft Entra Connect Sync, not Cloud Sync.
B). Microsoft Entra Domain Services
Microsoft Entra Domain Services is a managed domain service used to run legacy, domain-joined workloads in Azure. It does not synchronize on-premises forests into Microsoft Entra ID and is not a replacement for Entra Connect in hybrid identity scenarios.
D). Active Directory Federation Services (AD FS)
AD FS is an authentication and federation service. It does not synchronize users or devices to Microsoft Entra ID and does not support device writeback. Microsoft documentation positions AD FS as an authentication method, not a directory synchronization solution.