Exam 70-417 topic 1 question 687 discussion

Actual exam question from Microsoft's 70-417

Question #: 687
Topic #: 1

You have a group managed Service Account name Account01. Only three servers named Server01, Server02 and Server03 are allowed to use Account01 service account. You plan to decommission Server01. You need to prevent Server01 from using the Account01 service account. The solution must ensure that Server02 and Server03 continue to use the Account01 service account.
What command should you run?

A. Set-ADServiceAccount
B. Uninstall-ADServiceAccount
C. Remove-ADServiceAccount
D. Reset-ADServiceAccountPassword

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://technet.microsoft.com/en-us/library/ee617190.aspx
https://www.petri.com/restrict-privileged-accounts-with-authentication-silos-in-windows-server-2012-r2

by ms70743 at Aug. 21, 2020, 10:40 a.m.

Comments

Submit Cancel

ms70743

4 years, 9 months ago

Answer is C: The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not make changes to any computers that use the service account. After this operation, the service account is no longer hosted on the target computer but still exists in the directory.

upvoted 2 times

...

Exam 70-417 All Questions

View all questions & answers for the 70-417 exam

Exam 70-417 topic 1 question 687 discussion

Comments

ms70743

SY0-701