Respond to Abel:

• What tools can be used to bulk modify the attributes of identified user accounts?
  Best way? Powershell, AzCLI or Bash on Azure off a .CSV. Bulk Operations in both M365 and Azure are available directly off the portal and available for you to download and fill out, then run simply single line commands directly from the portal to consume the .CSV and execute. There are also other AAD internal tools, as well as many third party tools that extend or reach into AAD.
• How many instances of Azure AD Connect are needed for Ohm Productions?
  One. Tenants are a 1:1 with entire organization. Forests, OUs and Domains can all be broken down in, and arranged by Management Groups, Subscriptions, and Resource Groups for resources and AAD groups, assigned RBAC, ACL or Dynamic, for identity management.
• How can you ensure that the members of the Development and Plant Operations department do not synchronize?
  tags. Resource and Identity tags allow many of the Azure APIs to be filtered in by particular User Object attributes from both the AAD and ADDS sides.
• How do you meet the recovery process requirement?
  Azure Recovery Services, which has the ability to run back ups and replications of DCs/ADDS in case of disasters or to restore to a previous point in which user object were lost or unreachable. Azure active directory relies on it’s online, SLA reliable, data retention and storage policies, and with Azure AD Connect, you have the availability to rely both on the on-prem solution, as well as the cloud based solution, ensuring a high availability identity approach should anything bad happen.

  How long does Azure AD store reporting data? | Microsoft Docs
  Restore or permanently remove recently deleted user – Azure AD | Microsoft Docs
  Guidance and best practices – Azure Backup | Microsoft Doc

rRespond to Dexter:

What tools can be used to bulk modify the attributes of identified user accounts?

The AD Bulk User Modify tool uses a CSV file to bulk modify Active Directory user accounts. All you need is the users sAMAccountName and the LDAP attribute you want to modify.

If you are not familiar with LDAP attributes you may want to jump to the LDAP attributes section for a quick overview. I’ve created an LDAP cheat sheet to quickly find the correct LDAP values.

How many instances of Azure AD Connect are needed for Ohm Productions?

The Azure Active Directory Connect tool also supports synchronization from multiple on-premises Active Directory forests to a single Azure Active Directory instance. Multiple forest synchronization to a single Azure AD instance is supported only when a single Azure AD Connect server is in use. Microsoft does not support multiple Azure AD Connect servers synchronizing with a single Azure AD instance, whether there is one or multiple forests being synchronized.

How can you ensure that the members of the Development and Plant Operations department do not synchronize?

While using Azure AD Connect to synchronize on-premises Active Directory to an Azure Active Directory instance, the default setting is to have all group accounts, user accounts, and mail-enabled contact objects synchronized up to the cloud. For a few organizations, synchronizing everything is exactly what they want. However, other organizations want to be even more selective about which objects are synchronized from the on-premises Active Directory environment to the Azure Active Directory instance that supports the Office 365 tenancy.

How do you meet the recovery process requirement

The Azure Site Recovery service contributes to your business continuity and disaster recovery (BCDR) strategy by keeping your business applications online during planned and unplanned outages. Site Recovery manages and orchestrates disaster recovery of on-premises machines and Azure virtual machines (VM), including replication, failover, and recovery.

Allen, R. (2020, July 2). How to bulk modify active directory user attributes. Active Directory Pro. https://activedirectorypro.com/how-to-bulk-modify-ad-user-attributes/