nerdexam
Microsoft

AZ-800 · Question #104

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following exhibit table. You plan to install a…

The correct answer is A. On Server1, run the install-ADServiceAccount cmdlet. B. On DC1, run the New-ADServiceAccount cmdlet. We need to: create, configure, and install the gMSA that will be used by the new application. The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object. Install-ADServiceAccount Reference Feedback Module: ActiveDirectory Installs an Active…

Deploy and manage Active Directory Domain Services

Question

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following exhibit table. You plan to install a line-of-business (LOB) application on Server1. The application will install a custom Windows service. A new corporate security policy states that all custom Windows services must run under the context of a group managed service account (gMSA). You deploy a root key. You need to create, configure, and install the gMSA that will be used by the new application. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

Exhibit

AZ-800 question #104 exhibit

Options

  • AOn Server1, run the install-ADServiceAccount cmdlet.
  • BOn DC1, run the New-ADServiceAccount cmdlet.
  • COn DC1, run the Set_ADComputer cmdlet.
  • DON DC1, run the Install-ADServiceAccount cmdlet.
  • EOn Server1, run the Get-ADServiceAccount cmdlet.
  • FOn Server1, run the setspn command.

How the community answered

(44 responses)
  • A
    82% (36)
  • C
    9% (4)
  • D
    2% (1)
  • E
    5% (2)
  • F
    2% (1)

Explanation

We need to: create, configure, and install the gMSA that will be used by the new application. The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object. Install-ADServiceAccount Reference Feedback Module: ActiveDirectory Installs an Active Directory managed service account on a computer or caches a group managed service account https://docs.microsoft.com/en-us/windows-server/security/group-managed-service- accounts/getting-started-with-group-managed-service-accounts

Topics

#Group Managed Service Accounts (gMSA)#Active Directory Domain Services (AD DS)#PowerShell#Service Account Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-800 Practice