What should you do?

Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the objects shown in the following table.

You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies.

What should you do?
A . Change the scope of Group2 to Universal
B . Clear the Configure device writeback option.
C . Change the scope o’ Group1 and Group2 to Global
D . Select the Configure Hybrid Azure AD join option.

View Answer

Answer: D

Explanation:

Hybrid Azure AD join needs to be configured to enable Computer1 to be used in Conditional Access Policies. Synchronized users, universal groups and domain local groups can be used in Conditional Access Policies.