AZ-800 Practice Test

Question 31

Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site. You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1. You need to recommend a deployment plan that meets the following requirements: • Ensures that a user named User1 can perform the RODC installation on Server1 • Ensures that Server1 is in a new site named RemoteSite1 • Uses the principle of least privilege Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 32

Your network contains an Active Directory domain named contoso.com. The domain contains the computers shown in the following table. On Server3, you create a Group Policy Object (GPO) named GPO1 and link GPO1 to contoso.com. GPO1 includes a shortcut preference named Shortcut1 that has item-level targeting configured as shown in the following exhibit. To which computer will Shortcut1 be applied?

1. Server3 only
2. Computer1 and Server3 only
3. Server2 and Server3 only
4. Server1, Server2, and Server3 only

Question 33

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the latency for changes to Active Directory. What should you do?

1. For each site links, modify the site link costs.
2. Create a site link bridge that contains all the site links.
3. For each site link, modify the options attribute.
4. For each site link, modify the replication schedule.

Question 34

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. Contoso.com contains three child domains named amer.contoso.com, apac.contoso.com, and emea.contoso.com. Fabrikam.com contains a child domain named apac.fabrikam.com. A bidirectional forest trust exists between contoso.com and fabrikam.com. You need to provide users in the contoso.com forest with access to the resources in the fabrikam.com forest. The solution must meet the following requirements: • Users in contoso.com must only be added directly to groups in the contoso.com forest. • Permissions to access the resources in fabrikam.com must only be granted directly to groups in the fabrikam.com forest. • The number of groups must be minimized. Which type of groups should you use to organize the users and to assign permissions? To answer, drag the appropriate group types to the correct requirements. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 35

Your network contains two Active Directory forests and a domain trust as shown in the following exhibit. The domain trust has the following configurations: • Name: adatum.com • Type: External • Direction: One-way, outgoing • Outgoing trust authentication level: Domain-wide authentication The forests contain the users shown in the following table. The forests contain the network shares shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.