nerdexam
Microsoft

AZ-800 · Question #123

SIMULATION You need to ensure that the minimum password length for members of the BranchAdmins group is 12 characters. The solution must affect only the BranchAdmins group. To complete this task…

The correct answer is A. Create a new fine-grained password policy. To enforce a minimum password length of 12 characters for only the BranchAdmins group, a new fine-grained password policy (FGPP) must be created and applied to that specific group.

Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments

Question

SIMULATION You need to ensure that the minimum password length for members of the BranchAdmins group is 12 characters. The solution must affect only the BranchAdmins group. To complete this task, sign in the required computer or computers. Answer:

Create a new fine-grained password policy. In the following procedure you will create a new fine-grained password policy using the UI in ADAC. To create a new fine grained password policy. Step 1: Right click the Windows PowerShell icon, click Run as Administrator and type dsac.exe to open ADAC. Step 2: Click Manage, click Add Navigation Nodes and select the appropriate target domain in the Add Navigation Nodes dialog box and then click OK. Step 3: Click Manage, click Add Navigation Nodes and select the appropriate target domain in the Add Navigation Nodes dialog box and then click OK. Step 4: In the Tasks pane, click New, and then click Password Settings. Fill in or edit fields inside the property page to create a new Password Settings object. The Name and Precedence fields are required. In our case:

Minimum password length: 12 Step 5: Under Directly Applies To, click Add, type BranchAdmin, and then click OK. Reference:

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to- active-directory-administrative-center-enhancements--level-100-#bkmk2_test_fgpp1

Exhibit

AZ-800 question #123 exhibit

Options

  • ACreate a new fine-grained password policy.

How the community answered

(43 responses)
  • A
    100% (43)

Why each option

To enforce a minimum password length of 12 characters for only the BranchAdmins group, a new fine-grained password policy (FGPP) must be created and applied to that specific group.

ACreate a new fine-grained password policy.Correct

Fine-grained password policies (FGPPs) in Active Directory allow administrators to apply different password and account lockout settings to different sets of users or groups within a single domain, unlike the default domain policy which applies to all users. Creating an FGPP specifically for the BranchAdmins group ensures that only members of that group are affected by the 12-character minimum password length.

Concept tested: Active Directory Fine-Grained Password Policies

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/step-by-step-guide-for-configuring-fine-grained-password-and-account-lockout-policy-settings

Topics

#Active Directory#Fine-Grained Password Policy#ADAC#Password Management

Community Discussion

No community discussion yet for this question.

Full AZ-800 Practice