Microsoft Certified:Windows Server Hybrid Administrator Associate
Create and Manage AD DS Security Principals AZ-800 Practice Questions (Page 5)
Part of the Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments domain, which accounts for 30–35% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 2–5 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)
Questions 21–25
- 21
Which type of group in Active Directory can be used to assign permissions to resources but cannot be used for email distribution?
Select an answer first - 22
When managing user accounts across different forests, which type of group can contain users from another forest and be used to assign permissions to resources in the local forest?
Select an answer first - 23
You need to allow a user from Forest A to access a resource in Forest B. What must exist between the two forests to enable this access?
Select an answer first - 24
You need to install a group Managed Service Account (gMSA) on a Windows Server that will run a service. The gMSA has been created in AD DS. Which PowerShell cmdlet should you run on the target server to make the gMSA available to the local service?
Select an answer first - 25
A forest has two domains: domaina.com and domainb.com. A user in domaina.com needs to access a resource in domainb.com. The resource's ACL grants access to the 'DomainB Users' domain local group. What is the most efficient way to grant access to the user?
Select an answer first
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.