nerdexam
LPI

117-302 · Question #110

How can it the checked that a machine was successfully added to an Active Directory environment?

The correct answer is C. net ADS testjoin. See the full explanation below for the reasoning.

Question

How can it the checked that a machine was successfully added to an Active Directory environment?

Options

  • Atdbdump /etc/samba/secret.tdb
  • Btestparm -v | grep join
  • Cnet ADS testjoin
  • Dnet RPC testjoin

How the community answered

(22 responses)
  • A
    14% (3)
  • B
    5% (1)
  • C
    73% (16)
  • D
    9% (2)

Community Discussion

4
Ola B.Ola B.Mar 6, 2026

net ADS testjoin is your go-to here because ADS is the Samba subcommand that talks to Active Directory specifically, and testjoin does exactly what the name says, it verifies the machine account is valid in the domain. Spin up a Linux box joined to a test AD domain and run it yourself, you will see "Join is OK" come back when everything is wired up correctly.

17
Grace U.Grace U.Feb 24, 2026

D trips up a lot of people here because the syntax looks almost identical and "RPC" sounds like it could belong in a modern Windows environment, but RPC mode in Samba is tied to the older NT4-style domain model, not Active Directory. When you are working with ADS specifically, you need the ADS subcommand, which is what net ADS testjoin gives you, and that command will tell you plainly whether the machine account is recognized in the directory. The wording "successfully added" is a little loose since testjoin verifies current membership, not the historical add event, but for exam purposes that distinction does not change the answer. C is your pick.

3
Toby R.Toby R.Mar 13, 2026

I got this one on my exam and went with D because net RPC testjoin is the command I had drilled into my head for verifying domain membership, and it worked when I tested it in my lab against a Samba setup talking to AD. Pretty sure C is the ADS-specific variant but D is the broader RPC check that the objectives were pointing at when I studied the material.

-1
Grace U.Grace U.Mar 15, 2026

Toby, the net ads testjoin command is the right call here because it speaks the Active Directory dialect directly, verifying Kerberos and LDAP integration, while net rpc testjoin uses older NT-style RPC and can show a clean result even when the ADS-specific components are broken.

0
Full 117-302 Practice