Exam 70-413 topic 1 question 99 discussion

Actual exam question from Microsoft's 70-413

Question #: 99
Topic #: 1

Your company has two divisions named Division1 and Division2.
The network contains an Active Directory domain named contoso.com. The domain contains two child domains named divisionl.contoso.com and division2.contoso.com.
The company sells Division1 to another company.
You need to prevent administrators in contoso.com and division2.contoso.com from gaining administrative access to the resources in division1.contoso.com.
What should you recommend?

A. Create a new tree in the forest named contoso.secure. Migrate the resources and the accounts in division1.contoso.com to contoso.secure.
B. On the domain controller accounts in division1.contoso.com, deny the Enterprise Admins group the Allowed to Authenticate permission.
C. Create a new forest and migrate the resources and the accounts in division1.contoso.com to the new forest.
D. In division1.contoso.com, remove the Enterprise Admins group from the Domain Admins group and remove the Enterprise Admins group from the access control list (ACL) on the division1.contoso.com domain object.

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
ADMT Guide: Migrating and Restructuring Active Directory Domains https://technet.microsoft.com/en-us/library/cc974332(v=ws.10).aspx

by spam at Feb. 10, 2020, 11:52 a.m.

Comments

Submit Cancel

spam

5 years, 5 months ago

REFERENCE : ADMT Guide: Migrating and Restructuring Active Directory Domains https://technet.microsoft.com/en-us/library/cc974332(v=ws.10).aspx

upvoted 1 times

...