MS-102 Practice Question: Implement and manage Microsoft Entra identity and access
Your organization is implementing a hybrid identity solution. You want to synchronize on-premises Active Directory users to Microsoft Entra ID. Which tool should you use?
⚠ Common exam trap
Watch out — candidates often confuse 'Microsoft Entra Connect Sync' (the sync engine component) with the full 'Microsoft Entra Connect' tool, or they incorrectly assume 'Cloud Sync' is sufficient for all hybrid scenarios despite its missing writeback and federation capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Connect
Microsoft Entra Connect (formerly Azure AD Connect) is the correct tool for synchronizing on-premises Active Directory users to Microsoft Entra ID in a hybrid identity solution. It supports both password hash synchronization, pass-through authentication, and federation with Active Directory Federation Services (AD FS), making it the primary and most feature-rich sync tool for complex hybrid environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Identity Manager
Why it's wrong here
Microsoft Identity Manager (MIM) is an on-premises identity management product focused on managing identities, groups, and access workflows within your local Active Directory environment. It lacks the built-in cloud synchronization engine required to automatically provision and sync your on-premises identities to Microsoft Entra ID. While MIM can integrate with sync solutions, it is not the tool Microsoft provides for hybrid directory synchronization.
- ✗
Microsoft Entra Cloud Sync
Why it's wrong here
Microsoft Entra Cloud Sync is a lightweight agent-based sync solution designed for specific cases such as consolidating multiple disconnected AD forests, not for standard hybrid identity deployments. It does not offer the full set of hybrid capabilities you get with the primary sync engine, including complete device sync, seamless single sign-on, and integrated health monitoring. For a typical hybrid identity implementation, Microsoft Entra Connect is the more appropriate and feature-complete choice.
- ✗
Microsoft Entra Connect Sync
Why it's wrong here
Microsoft Entra Connect Sync is not a separate product; it is the synchronization engine that runs as a core component inside Microsoft Entra Connect. Using this name often reflects the older Microsoft Entra Connect terminology, but the deployable product that you install and configure for hybrid identity is Microsoft Entra Connect itself. Choosing 'Connect Sync' as an answer would be incorrect because it is merely a component, not the comprehensive tool that includes installation, configuration, and authentication options.
- ✓
Microsoft Entra Connect
Why this is correct
Microsoft Entra Connect is the correct tool for a hybrid identity solution because it provides a single, unified sync engine that connects on-premises Active Directory with Microsoft Entra ID. It supports essential features such as password hash sync, pass-through authentication, single sign-on, and optional federation to deliver a seamless hybrid experience. For most organizations, this is the recommended and fully supported path to implement hybrid identity.
Go deeper
Related to this question
Learn chapter
Entra Connect Health Monitoring
Key term
Password hash synchronization
Password hash synchronization is a Microsoft Microsoft Entra Connect feature that synchronizes a hash of a user's on-premises Active Directory password to Microsoft Entra ID, enabling cloud-based authentication without additional infrastructure.
Key term
Federation
Federation is a system that lets you use one set of login credentials (like your work email and password) to access resources across different organizations or services without needing separate accounts for each one.
About these practice questions
One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.