Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory(Azure AD) tenant with the same name.After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not beAllowed to sync toAzure A
D:Which of the following actions should you take?
选项：

A:You should make use of the Synchronization Rules Editor to create an attribute-based fltering rule.
B:You should confgure a DNAT rule on the Firewall.
C:You should confgure a network trafc fltering rule on the Firewall.
D:You should make use of Active Directory Users and Computers to create an attribute-based fltering rule.