ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam
Go to Exam

Exam 70-744 topic 1 question 90 discussion

Actual exam question from Microsoft's 70-744
Question #: 90
Topic #: 1
[All 70-744 Questions]

Your network contains an Active Directory forest named contoso.com. The forest contains three domains. All domain controllers run Windows Server 2016.
You deploy a second Active Directory forest named admin.contoso.com. The forest contains a domain member server named Server1. Server1 has Microsoft
Identity Manager (MIM) 2016 deployed.
You need to implement Privileged Access Management (PAM) and to use admin.contoso.com as an administrative forest.
Which two actions should you perform? Each correct answer presents part of the solution.

  • A. From Server1, run the New-PAMTrust cmdlet.
  • B. From a domain controller in contoso.com, run the New-PAMDomainConfiguration cmdlet.
  • C. From a domain controller in admin.contoso.com, run the New-PAMTrust cmdlet.
  • D. From a domain controller in contoso.com, run the New-PAMTrust cmdlet.
  • E. From a domain controller in admin.contoso.com, run the New-PAMDomainConfiguration cmdlet.
  • F. From Server1, run the New- PAMDomainConfiguration cmdlet.
Show Suggested Answer Hide Answer
Suggested Answer: AF 🗳️
References:
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/step-5-establish-trust-between-priv-corpforests
by Kamikazekiller at Aug. 9, 2020, 3:06 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
spleach
4 years, 3 months ago
yes I imagine those commands aren't available on any server where MIM isn't installed anyway
upvoted 1 times
...
SamsOtro
4 years, 5 months ago
Correct. Both commands get run on the server where MIM is installed.
upvoted 3 times
...
thissiteisgreat
4 years, 8 months ago
Should be B, D. All 2 commands should be run on each production forest domain (https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/step-5-establish-trust-between-priv-corp-forests)
upvoted 1 times
twiggs_county
4 years, 7 months ago
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam "Install MIM components on PAMSRV and the cmdlets on a CONTOSO forest member workstation, and prepare them for Privileged Access Management." So PAMSRV in the example is server1. answer is correct.
upvoted 8 times
KidCastaldo
4 years, 6 months ago
I agree, given answer is correct.
upvoted 2 times
...
...
KidCastaldo
4 years, 6 months ago
Nope, even the site you reference states from PAM Server in Priv domain run those 2 cmdlets.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago