Microsoft Exam AZ-801 Topic 3 Question 58 Discussion

Actual exam question for Microsoft's AZ-801 exam

Question #: 58
Topic #: 3

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

AEAST\Domain Admins only

BCONTOSO\Enterprise Admins only

CCONTOSO/Schema Admins and EAST\Domain Admins

DCONTOSO\Enterprise Admins and CONTOSO/Schema Admins

Show Suggested Answer

Suggested Answer: C

by Mona at Jul 09, 2024, 02:36 AM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leota

11 months ago

LOL, I bet the test-makers are trying to trip us up with all these domain names. But Option C looks like the way to go.

upvoted 0 times

Barrett

9 months ago

Let's go with Option C then, covering all our bases.

upvoted 0 times

...

Mignon

9 months ago

Yeah, giving Admin1 both Schema Admins and Domain Admins rights makes sense.

upvoted 0 times

...

Tish

9 months ago

I agree, Option C seems like the best choice.

upvoted 0 times

...

Lilli

9 months ago

I'm going with Option C as well. It follows the principle of least privilege.

upvoted 0 times

...

Annamaria

9 months ago

Yeah, I think adding Admin1 to both Schema Admins and Domain Admins groups makes sense.

upvoted 0 times

...

Christa

10 months ago

I agree, Option C seems like the best choice.

upvoted 0 times

...

Kanisha

11 months ago

I'm not sure, but I think the answer might be D) CONTOSO\Enterprise Admins and CONTOSO/Schema Admins.

upvoted 0 times

...

Mireya

11 months ago

I agree with Arlen. The principle of least privilege is important, and granting Admin1 just the specific permissions required makes sense.

upvoted 0 times

...

Option C seems to be the most logical choice. Adding Admin1 to both CONTOSO\Schema Admins and EAST\Domain Admins would give him the necessary permissions to add a new domain controller to the east.contoso.com domain.

upvoted 0 times