When creating a new user account in Active Directory Domain Services, which attribute is required to be unique within the domain?

User logon name (pre-Windows 2000)

Which service account type is automatically managed by the local computer and is used for services that do not require access to network resources?

Standalone Managed Service Account (sMSA)

Group Managed Service Account (gMSA)

Fabrikam and Contoso are separate forests with a forest trust. A user in Fabrikam needs to access a file share in Contoso. The Contoso share's ACL grants access to the 'Contoso Users' domain local group. The Fabrikam user is a member of the 'Fabrikam Users' global group. What is the minimum configuration required for the Fabrikam user to access the share?

Add the Fabrikam user directly to the 'Contoso Users' domain local group.

Add the 'Fabrikam Users' global group to the 'Contoso Users' domain local group.

Change the share ACL to include the 'Fabrikam Users' global group.

Create a universal group in Contoso and add the Fabrikam user to it.

You need to create a user account for a temporary employee. The account should be disabled automatically after 90 days. What should you do?

Set the password to expire in 90 days.

Create a scheduled task to disable the account after 90 days.

Set the account expiration date to 90 days from today.

Add the user to a group that has an expiration policy.

Which command can you use to join a Windows Server to an AD DS domain from an elevated PowerShell prompt?

Join-Domain -DomainName 'contoso.com'

Add-Computer -DomainName 'contoso.com' -Restart

Set-Computer -DomainName 'contoso.com'

Connect-Computer -DomainName 'contoso.com'

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 1Objective 3

Create and Manage AD DS Security Principals AZ-800 Practice Questions (Page 1)

Part of the Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments domain, which accounts for 30–35% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 2–5 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

9concepts

30–35%of the exam

9 Concepts in This Objective

AD DS User Creation
AD DS Group Management
Multi-Domain User Management
Multi-Forest User Management
Service Account Types
Service Account Implementation
Join Windows Server to AD DS
Join Windows Server to Microsoft Entra Domain Services
Join Windows Server to Microsoft Entra

Questions 1–5

1foundation · easy
When creating a new user account in Active Directory Domain Services, which attribute is required to be unique within the domain?
Select an answer first
2foundation · easy
Which service account type is automatically managed by the local computer and is used for services that do not require access to network resources?
Select an answer first
3expert · hard
Fabrikam and Contoso are separate forests with a forest trust. A user in Fabrikam needs to access a file share in Contoso. The Contoso share's ACL grants access to the 'Contoso Users' domain local group. The Fabrikam user is a member of the 'Fabrikam Users' global group. What is the minimum configuration required for the Fabrikam user to access the share?
Select an answer first
4application · medium
You need to create a user account for a temporary employee. The account should be disabled automatically after 90 days. What should you do?
Select an answer first
5foundation · easy
Which command can you use to join a Windows Server to an AD DS domain from an elevated PowerShell prompt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.