You have created a gMSA in AD DS. You need to configure a Windows service to run under this gMSA. What should you do?

Use the sc.exe config command to set the service logon account.

Use the Services console to set the service logon account to the gMSA name.

Use the Set-Service cmdlet to change the service logon account.

Use the New-Service cmdlet to create a new service with the gMSA.

A company wants to join its Windows Server to Microsoft Entra ID (Azure AD) so that the server can be managed from the cloud. The server is currently in a workgroup. What should you do?

Use the Server Manager to add the server to a workgroup.

Run the command: Add-Computer -DomainName 'contoso.onmicrosoft.com'

Install the Active Directory Domain Services role and promote the server to a domain controller.

Run the command: dsregcmd /join

You need to join a Windows Server to an Active Directory Domain Services (AD DS) domain. Which tool can you use to perform this action?

Active Directory Users and Computers (ADUC)

Group Policy Management Console (GPMC)

You need to install a service on a Windows Server that will use a Group Managed Service Account (gMSA). Which command can you use to install the service with the gMSA as the logon account?

Install-Service -Name 'ServiceName' -Account 'DOMAIN\gMSA'

New-Service -Name 'ServiceName' -BinaryPathName 'C:\Path\Service.exe' -Credential (Get-Credential)

sc.exe create ServiceName binPath= 'C:\Path\Service.exe' obj= 'DOMAIN\gMSA$' password= ' '

Set-Service -Name 'ServiceName' -Credential (Get-Credential)

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 1Objective 3

Create and Manage AD DS Security Principals AZ-800 Practice Questions (Page 4)

Part of the Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments domain, which accounts for 30–35% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 2–5 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

9concepts

30–35%of the exam

9 Concepts in This Objective

AD DS User Creation
AD DS Group Management
Multi-Domain User Management
Multi-Forest User Management
Service Account Types
Service Account Implementation
Join Windows Server to AD DS
Join Windows Server to Microsoft Entra Domain Services
Join Windows Server to Microsoft Entra

Questions 16–20

16application · medium
You have created a gMSA in AD DS. You need to configure a Windows service to run under this gMSA. What should you do?
Select an answer first
17application · medium
A company wants to join its Windows Server to Microsoft Entra ID (Azure AD) so that the server can be managed from the cloud. The server is currently in a workgroup. What should you do?
Select an answer first
18foundation · easy
You need to join a Windows Server to an Active Directory Domain Services (AD DS) domain. Which tool can you use to perform this action?
Select an answer first
19foundation · easy
You need to join a Windows Server to Microsoft Entra ID (formerly Azure AD) so that it can be managed from the cloud. Which feature must be enabled on the server to allow this?
Select an answer first
20foundation · easy
You need to install a service on a Windows Server that will use a Group Managed Service Account (gMSA). Which command can you use to install the service with the gMSA as the logon account?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.