Exam 70-742 topic 1 question 54 discussion

Actual exam question from Microsoft's 70-742

Question #: 54
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table.

A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators groups in ForestA.
Solution: In each domain in ForestB, you add the users to the Server Operators group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

by panda at Nov. 8, 2019, 12:21 p.m.

Comments

Submit Cancel

jam7272

4 years, 7 months ago

Server Operators is a built-in group. You can add members TO the group. But the group cannot be a member of another group (any group). So the answer is no.

upvoted 1 times

...

VeiN

4 years, 8 months ago

Server Operators is Buildin Local group and acts like Domain Local. You can do it in 4 ways (let say user A from forrest A, needs to have Server Operators (SO) from forrest B): - Add user A directly as a member of SO from forrest B - Add user A to Global group forrest A, add this group as a member of AO from forrest B - Add user A to universal group forrest A, add this group as a member of SO from forrest B - Add user A to Global group and nest to universal group (all in forrest A), add universal group as a member of SO from forrest B For me its A (Correct), modifying membership by adding users directly to SO of another forrest.

upvoted 1 times

VeiN

4 years, 8 months ago

On the other hand maybe the question suiggest that you try to add SO from one forrest to SO of another forrest and thats not possible.

upvoted 1 times

...

BruceVolcanoShark

4 years, 10 months ago

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755692(v=ws.10)?redirectedfrom=MSDN Domain local Group can include as members… Domain local groups but only from the same domain as the parent domain local group.

upvoted 2 times

alexnt

4 years, 7 months ago

A or B?

upvoted 1 times

...

panda

5 years, 6 months ago

I think B(No) is correct. I think that you could add the Server Operators in ForestB to the Server Operators in ForestA. Because the Server Operators is one of Local Domain Group, You could add the Server Operators to the Server Operators if they are in same domain. Because the two-way forest trust has already existed between ForestA and ForestB, however Local Domain Group couldn’t refer to different domain or forest, you couldn’t do the previously operation if they are in different forest.

upvoted 4 times

...

panda

5 years, 7 months ago

I think correct answer is B. However in any case it can't be add a user on a domain to a groupaccount on the others ? I can't understand what purpose is this question.

upvoted 1 times

...