SC-300 Certification Practice Question #75

Question

You have two Microsoft Entra tenants named contoso.com and fabrikam.com. Contoso.com contains the identities shown in the following table.

You configure cross-tenant synchronization from contoso.com to fabrikam.com.

Which identities will sync with fabrikam.com?

Accepted Answer

This item is keyed to the long-standing cross-tenant synchronization behavior cited by the dominant community vote and Suggested Answer: only Microsoft Entra **users** flow to the target tenant. A security group (Group1) can be used to *scope* who is provisioned, but classically the group object itself is not created in fabrikam.com, and a Microsoft 365 group (Group2) is explicitly unsupported as a synced object — so the synced identity is **User1 only**. The Suggested Answer (A) and Most Voted (A, 17 votes), reinforced by the top Highly Voted comment (👍 10) quoting the overview page, all converge on A. Confidence is held at 80% because the documentation has since evolved — current MS Learn states security groups *can* be created in the target when group synchronization is enabled, which a minority (Frank9020 👍 2, test123123 👍 2) cite to argue for B. That capability is opt-in and does not create M365 groups, so even under the newer behavior Group2 is excluded; given the exam's keyed answer and the overwhelming A vote, A remains the best response, with confidence reduced to reflect the doc drift.

More SC-300 practice questions