What is the best approach to achieve the goal?

Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.

The network uses a firewall that contains a list of allowed outbound domains.

You began to implement directory synchronization.

You discover that the firewall configuration contains only the following domain names in the list of allowed domains:

• *.microsof.com

• *.office.com

Directory synchronization fails.

You need to ensure that directory synchronization completes successfully.

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
A . From the firewall, allow the IP address range of the Azure data center for outbound communication.
B. From Azure AD Connect, modify the Customize synchronization options task
C. Deploy an Azure AD Connect sync server in staging mode.
D. From the firewall, create a list of allowed inbound domains.
E. From the firewall, modify the list of allowed outbound domains.

View Answer

Answer: E

Explanation:

Azure AD Connect needs to be able to connect to various Microsoft domains such as login.microsoftonline.com. Therefore, you need to modify the list of allowed outbound domains on the firewall.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports