AZ-802

AZ-802 practice questions, page 6 of 8, with answer review and explanations.

Question 26

You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. You deploy a server to the domain and configure the server to run a service. You need to ensure that the service can use a group managed service account (gMSA) to authenticate. Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Question 27

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two domain controllers named DC1 and DC2. You plan to perform the following actions: ● Add two domain controllers named DC3 and DC4 to contoso.com. ● Configure DC3 as a domain controller and DC4 as a read-only domain controller (RODC). ● Add a new child domain named east.contoso.com that will be hosted on a domain controller named DC5. You need to use the install from media (IFM) option, whenever possible. What can you use to prepare the IFM data, and which domain controllers can be promoted by using the IFM option? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 28

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file server named FS1 that hosts a file share named Finance. The domain contains an organizational unit (OU) named OU1 and a global security group named Group1. A Group Policy Object (GPO) named GPO1 is linked to OU1. You need to configure a Group Policy preferences item that maps drive F to \\FS1\Finance for the members of Group1. The item will use Security Group item-level targeting and remove the preferences setting when the setting no longer applies. The solution must recreate the preferences setting during Group Policy refresh if a user deletes or changes the setting. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 29

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. You have an Azure subscription. The AD DS domain contains the domain controllers shown in the following table. To the Azure subscription, you deploy a virtual machine named DC5 that runs Windows Server 2025. You plan to promote DC5 to a domain controller by using Install from media (IFM). You need to create the media for DC5. The solution must minimize the network traffic between the on-premises network and the Azure subscription during the promotion of DC5. Which domain controller should you use to create the IFM media?

  1. DC1
  2. DC2
  3. DC3
  4. DC4

Question 30

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From a command prompt, you run netdom.exe query fsmo. Does this meet the goal?

  1. Yes
  2. No