Exam 70-744 topic 1 question 111 discussion

Actual exam question from Microsoft's 70-744

Question #: 111
Topic #: 1

HOTSPOT -
You are implementing Privileged Access Management (PAM) for an Active Directory forest named contoso.com.
You install a bastion forest named adatum.com, and you establish a trust between the forests.
You need to create a group in contoso.com that will be used by Microsoft Identity Manager to create groups in adatum.com.
How should you configure the group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/planning-bastion-environment

by Kamikazekiller at Aug. 9, 2020, 3:16 p.m.

Comments

Submit Cancel

KidCastaldo

Highly Voted 4 years, 9 months ago

yes, reference is correct

upvoted 5 times

...

SamsOtro

Highly Voted 4 years, 6 months ago

CONTOSO$$$ and Domain Local SG are correct.

upvoted 5 times

...

Yebubbleman

Most Recent 4 years, 5 months ago

Explanation as to why the answer is correct: the group name to create must always be the NetBIOS name of the production forest with three $'s after it. So, in this case, CONTOSO$$$. Since the bastion forest is not going to need to be complex enough for multiple domains therein, you don't need Global or Universal groups, and you're not sending using these groups for e-mail, so they're not distribution groups either.

upvoted 3 times

V1980

4 years, 5 months ago

This wasn't here when I first saw this Q. Today, when I went back to check for reasoning, I saw your message was left 12 hours ago. THANK YOU I appreciate you.

upvoted 1 times

...

dumpmaster

4 years, 5 months ago

Right answer

upvoted 2 times

...