Exam 70-742 topic 1 question 16 discussion

Answer A is correct and the most practical solution what always works when you have an untrusted pc. Every Sys admin/Helpdesk guy with field experience knows this because it is an common issue in a lot of organisations.

What is the answer that Microsoft is looking for here (given that A and B both technically work)?

A is definitely what I've done for the vast majority (if not entirety) of my professional career dealing with Active Directory. Though, I don't see why B isn't also a viable answer.

Reset computer account mean in AD, that all computer account password will be deleted from AD database. After this we still neeed to rejoin to the domain. All other settigs (membership in groups, SID ect) reamian.

sorry...wrong answer

C. From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1

I think A is the answer. In the question it states "You attempt to sign in to the domain from Computer1 and receive an error message." So you are using computer1. The easiest way since you are already at Computer1, would be to just unjoin and then join it back up.

got this q. if B is not available, A is the ans.

Answer A is correct! Resetting a computer account breaks that computer's connection to the domain and requires it to rejoin the domain. Ref: https://support.microsoft.com/en-ca/help/216393/resetting-computer-accounts-in-windows#:~:text=In%20the%20Active%20Directory%20Users,this%20method%20is%20not%20allowed.

B. From Active Directory Administrative Center, reset the computer account of Computer1.

A and B are both correct and work in a typical domain environment but the Microsoft answer is B.

I believe A is correct as well. I have unjoined and rejoined machines that throw the trust errors when it loses it against the domain. You can reset the computer account not to lose the unique ID and the membership but if it has been sitting unused for 5 months, I doubt anything needs to be retained.

guys, the best answer is B because reseting the computer accounts, it doesn't create a new SID. however, if you remove and join the computer (answer A), you are creating a new SID and then you must configure the new object in AD (OU, security settings, etcs), so the answer A will force administrative effort

https://www.youtube.com/watch?v=VyVBJs6oSHs According to the above link, if you will not reset the computer account from ADUC then after dis joining the computer from domain, the computer account will be removed from ADUC and it will be recreated when you again join the computer to the domain. But if you first reset the computer account after that dis join and join to the domain, the computer account will not be removed from ADUC. In both scenario, you have to unjoin computer from domain and rejoin after that you can sign in using domain account. So the correct answer is A.

The answer is A. Resetting the computer account breaks the trust. Then you have to disjoin/join.

Exam answer is B (even though Real world answer is A). Nothing mentioned regarding scavenging so we have to assume the computer account still exists.

In the real world, the answer is A... However, for the purposes for this exam, the answer should be B... https://theitbros.com/fix-trust-relationship-failed-without-domain-rejoining/ Computers that lose their trust are due to a mismatch between the computer password in AD and the actual computer password locally stored. Also, this question does not mention any sort of scavenging so we have to assume the computer account still exists.