AZ-802

AZ-802 practice questions, page 7 of 8, with answer review and explanations.

Question 31

You have an Active Directory Domain Services (AD DS) forest that has the Active Directory Recycle Bin enabled. The forest contains a user named User1. User1 is accidentally deleted. You need to restore User1 from the Active Directory Recycle Bin. What should you use?

  1. Active Directory Users and Computers
  2. Active Directory Domains and Trusts
  3. Active Directory Administrative Center
  4. Active Directory Sites and Services

Question 32

Your network contains an Active Directory Domain Services (AD DS) domain. You plan to use Active Directory Administrative Center to create a new user named User1. Which two attributes are required to create User1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. First name
  2. Password
  3. User UPN logon
  4. Profile path
  5. Full name
  6. User SamAccountName logon

Question 33

You have a single-domain Active Directory Domain Services (AD DS) forest named contoso.com that contains two domain controllers named DC1 and DC2. DC1 and DC2 run Windows Server. You plan to perform an authoritative restore of SYSVOL on DC1. You isolate DC1 and restore DC1 from a backup. You need to ensure that SYSVOL on DC1 replicates to DC2. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 34

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1. Server1 hosts an IIS website that has Windows Authentication enabled and Negotiate configured as an authentication provider. The IIS application pool runs as CONTOSO\WebAppSvc, and Kerberos uses the application pool identity. You discover that users cannot use Kerberos authentication to access http://server1.contoso.com. A network trace shows that a client computer named Client1 requested a service ticket for HTTP/server1.contoso.com, and the Key Distribution Center (KDC) returned KDC_ERR_S_PRINCIPAL_UNKNOWN. You need to restore Kerberos authentication. The application pool identity must remain unchanged. What should you modify?

  1. the time synchronization settings for Client1
  2. the servicePrincipalName attribute of CONTOSO\WebAppSvc
  3. the firewall rule for TCP port 80
  4. the DNS host (A) record for server1.contoso.com
  5. the servicePrincipalName attribute for the computer account of Server1

Question 35

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains privileged users that are members of a global security group named Group1 and are in multiple organizational units (OUs). The Default Domain Policy configures the password and account lockout policies for standard users. You need to ensure that only the members of Group1 have different password and account lockout policies. What should you do?

  1. Create a Password Settings Object (PSO) and apply the PSO to Group1.
  2. Create a new Group Policy Object (GPO) that contains Password Policy settings and link the GPO to the OUs that contain the Group1 members.
  3. Configure the Local Security Policy on the client computers used by the Group1 members.
  4. Modify the Password Policy settings in the Default Domain Policy.