HOTSPOT Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. The tenant contains a group named Group1 and the users shown in the following table. 
Domain/OU filtering in Azure AD Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.) 
You review the Azure AD Connect configurations as shown in the Configure exhibit. (Click the Configure tab.) 
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. 
encountered exactly similar question in my exam, in some practice tests. I picked YES YES YES since I thought all synced users could do SSPR and join groups, and pass-through was enabled. Probably missed that OU filtering excludes User2 from being synced, so last one should be No. Official study guide covers this syncing nuance well if anyone wants a refresher. Correct me if I'm off on this logic!
