You need to grant the necessary permissions to the synchronization account

###BeginCaseStudy###
Topic 1, Large Company
Background
You are the SharePoint administrator for a large company. You are responsible for installing and
configuring a multi-server SharePoint environment that will be used for information management and
collaboration.
The company has an Active Directory Domain Services (AD DS) domain. User-specific contact
information, including employee photos, is stored and managed in Active Directory. All employees are
located in the ActiveUsers organizational unit (OU).
The User Profile Synchronization service runs on a server named SERVER1.
Business Requirements
The SharePoint environment must meet the following business requirements:
 Ensure that users can connect to the portal by using the same URL from
any location.
 Ensure that users can access corporate information from outside the
network without using a VPN connection.
 Allow users to configure notifications for content changes.
 Allow users to follow content creators.
 Limit the number of sites and people each user can follow to 100.
 Allow content authors to upload documents, large image files, and large
video files for consumption by internal and external users.
 Allow administrators to promote search query results across the entire
company.
 Utilize My Sites to share content.
 Provide opportunities for social interaction.
Technical Requirements
You must meet the following technical requirements for the SharePoint environment:
 Do not exceed the minimum hardware specifications.
 Install the minimum supported versions of all software on the servers.
 Control the growth of storage utilization. Maximize existing content database usage before creating new content
databases.
 Store large files on network attached storage (NAS).
 Ensure that all web applications, site collections, files, databases, and
components stay within the supported limits.
 Configure the User Profile Synchronization service to import user profile
data from Active Directory.
 Grant the User Profile service account the least permissions necessary
to read data.
 Ensure that current and future SharePoint environments include the
most recent software updates.
 Use predefined database naming conventions.
 Create individual user sites by using the
https://contoso.com/personal/path.

###EndCaseStudy###

You create a User Profile Synchronization connection.
You need to grant the necessary permissions to the synchronization account.
What should you do?

A.
Grant the account Full Control on the ActiveUsers OU.

B.
Grant the account Full Control on the AuthenticatedUsers AD security group.

C.
Grant the account Read permission on the domain.

D.
Grant the account the Replicate Directory Changes permission on the domain.