A company has a remote site with no IT staff and a high risk of physical theft. They need to provide authentication for users at that site. They decide to deploy an RODC. Which configuration is essential to ensure that the RODC can authenticate users even if the WAN link is down?

Configure the Password Replication Policy to allow the RODC to cache the credentials of the users at that site.

Assign the RODC a static IP address.

Enable the RODC's global catalog attribute.

Set the RODC to replicate the entire domain partition.

You are deploying a new domain controller in an existing domain. You want to ensure that the new DC can be promoted without any issues. What should you do first?

Transfer the FSMO roles to the new server before promotion.

Install the AD DS role and then run the wizard.

Verify that the server can resolve the DNS name of the domain and reach an existing domain controller.

Run the Active Directory Domain Services Configuration Wizard and select 'Add a domain controller to an existing domain'.

Contoso has a single-domain forest with two domain controllers in the main office. They are adding a new branch office with 200 users and no IT staff. The branch office has a slow WAN link to the main office. You need to provide authentication and logon services at the branch office while minimizing the risk of a compromised branch-office server affecting the forest. What should you do?

Install a read-only domain controller (RODC) at the branch office and configure the Password Replication Policy to cache credentials for the branch users.

Install a new writable domain controller at the branch office but do not make it a global catalog server.

Install an RODC at the branch office but leave the Password Replication Policy empty.

Install a new writable domain controller at the branch office and configure it as a global catalog server.

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 1Objective 1

Deploy and Manage AD DS Domain Controllers AZ-800 Practice Questions (Page 4)

Part of the Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments domain, which accounts for 30–35% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 2–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

30–35%of the exam

8 Concepts in This Objective

On-Premises Domain Controller Deployment
On-Premises Domain Controller Management
Azure Domain Controller Deployment
Azure Domain Controller Management
Read-Only Domain Controller Deployment
Read-Only Domain Controller Management
FSMO Role Management
FSMO Role Troubleshooting

Questions 16–20

16application · medium
A company has a remote site with no IT staff and a high risk of physical theft. They need to provide authentication for users at that site. They decide to deploy an RODC. Which configuration is essential to ensure that the RODC can authenticate users even if the WAN link is down?
Select an answer first
17application · medium
You are deploying a new domain controller in an existing domain. You want to ensure that the new DC can be promoted without any issues. What should you do first?
Select an answer first
18foundation · easy
You suspect that the Infrastructure Master role holder is unavailable, which is causing issues with cross-domain object references. Which command-line tool can you use to identify the current Infrastructure Master role holder?
Select an answer first
19foundation · easy
You plan to deploy domain controllers in Azure as virtual machines. Which Azure feature should you use to ensure that the domain controllers are available across Azure availability zones?
Select an answer first
20application · medium
Contoso has a single-domain forest with two domain controllers in the main office. They are adding a new branch office with 200 users and no IT staff. The branch office has a slow WAN link to the main office. You need to provide authentication and logon services at the branch office while minimizing the risk of a compromised branch-office server affecting the forest. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.

Deploy and Manage AD DS Domain Controllers AZ-800 Practice Questions (Page 4)

Questions 16–20

A company has a remote site with no IT staff and a high risk of physical theft. They need to provide authentication for users at that site. They decide to deploy an RODC. Which configuration is essential to ensure that the RODC can authenticate users even if the WAN link is down?

You are deploying a new domain controller in an existing domain. You want to ensure that the new DC can be promoted without any issues. What should you do first?

You suspect that the Infrastructure Master role holder is unavailable, which is causing issues with cross-domain object references. Which command-line tool can you use to identify the current Infrastructure Master role holder?

You plan to deploy domain controllers in Azure as virtual machines. Which Azure feature should you use to ensure that the domain controllers are available across Azure availability zones?

Keep studying — Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments