Microsoft Exam AZ-801 Topic 3 Question 58 Discussion

Actual exam question for Microsoft's AZ-801 exam

Question #: 58
Topic #: 3

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

AEAST\Domain Admins only

BCONTOSO\Enterprise Admins only

CCONTOSO/Schema Admins and EAST\Domain Admins

DCONTOSO\Enterprise Admins and CONTOSO/Schema Admins

Show Suggested Answer

Suggested Answer: C

by Mona at Jul 09, 2024, 02:36 AM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leota

1 months ago

LOL, I bet the test-makers are trying to trip us up with all these domain names. But Option C looks like the way to go.

upvoted 0 times

Lilli

22 hours ago

I'm going with Option C as well. It follows the principle of least privilege.

upvoted 0 times

...

Annamaria

4 days ago

Yeah, I think adding Admin1 to both Schema Admins and Domain Admins groups makes sense.

upvoted 0 times

...

Christa

16 days ago

I agree, Option C seems like the best choice.

upvoted 0 times

...

Kanisha

1 months ago

I'm not sure, but I think the answer might be D) CONTOSO\Enterprise Admins and CONTOSO/Schema Admins.

upvoted 0 times

...

Mireya

2 months ago

I agree with Arlen. The principle of least privilege is important, and granting Admin1 just the specific permissions required makes sense.

upvoted 0 times

...

Option C seems to be the most logical choice. Adding Admin1 to both CONTOSO\Schema Admins and EAST\Domain Admins would give him the necessary permissions to add a new domain controller to the east.contoso.com domain.

upvoted 0 times