AZ-802 practice questions, page 5 of 8, with answer review and explanations.
Question 21
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties. Does this meet the goal?
Yes
No
Question 22
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table. You have a partner organization that has an AD DS forest named fabrikam.com. You create a trust relationship between contoso.com and fabrikam.com. You need to configure selective authentication for the trust relationship. Which domain controller should be granted permissions to fabrikam.com?
DC1
DC2
DC3
DC4
Question 23
Your network contains an Active Directory Domain Services (AD DS) domain. The network also contains 20 domain controllers, 100 member servers, and 10,000 client computers. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preferences in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item-level targeting should you use?
Security Group
Environment Variable
Domain
Operating System
Question 24
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master. Does this meet the goal?
Yes
No
Question 25
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains two organizational units (OUs) named OU1 and OU2. OU1 has Block Inheritance enabled. Contoso.com has the Group Policy Objects (GPOs) shown in the following table. Which GPOs will apply to users and computers in OU1 and OU2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.