exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 53 discussion

Actual exam question from Microsoft's 70-742
Question #: 53
Topic #: 1
[All 70-742 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table:

A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators groups in ForestA.
Solution: In each domain in ForestB, you create a global group that contains the user accounts of the respective domain. You create a universal group in
DomainBRoot. You add the new global groups to the new universal group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
[Removed]
Highly Voted 5 years, 4 months ago
I believe A is correct. Server Operators is a Domain Local group which can have as members user accounts, global groups and universal groups from any trusted domain (even from another forest if trusted). Therefore this configuration would work. To confirm, I even tested this configuration in a lab and added user accounts, global groups and universal groups from the other forest and all were accepted into the bulitin Domain Local Group Server Operators.
upvoted 24 times
lbs
4 years, 12 months ago
Thanks for the effort!
upvoted 4 times
...
...
STFN2019
Most Recent 4 years, 8 months ago
for once in a while you can have all YESs, both previous and this questions are YES
upvoted 1 times
...
promaster
4 years, 8 months ago
A. is correct. This is the standard proper method, AGUDLP
upvoted 3 times
...
nrj_the_engineer
4 years, 9 months ago
You need to create a forest trust between DomainA and DomainB before you can put users in groups between the two forests!
upvoted 1 times
DMc
4 years, 9 months ago
But the question states, "A two-way forest trust exists between ForestA and ForestB." ??
upvoted 1 times
...
...
Kamikazekiller
4 years, 11 months ago
answer is A-YES
upvoted 4 times
...
c3r3br4l
5 years, 6 months ago
Found this article which is old but describes the scope of a builtin group. https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb726978(v=technet.10)?redirectedfrom=MSDN From this, you can only add a group from the same domain to a builtin group so we could not forest B's universal group to Forest A's builtin group without first creating another group in ForestA to add the DomainBRoot universal group to.
upvoted 1 times
...
panda
5 years, 6 months ago
My correct answer is still B. To solve given problem after adding the new global groups to the new universal group, it needs to add it in ForestB to Server Operators in ForestA. Otherwise Dose "You modify the membership of the Server Operators in ForestA." mean the adding operation ?
upvoted 1 times
manjonei
5 years, 5 months ago
Yes, the "You modify the membership of the Server Operators in ForestA" comment means that you add universal group from DomainBRoot to Server Operators in ForestA. I think the answer is correct.
upvoted 3 times
...
...
panda
5 years, 7 months ago
I think that B is correct. It is as same as No.242
upvoted 1 times
Charchar
5 years, 7 months ago
I dont know if it's correct or not, but it definitely isn't the same as 241. It's the same question but the solution has extra steps to it (creation of global and universal groups and adding the global groups into the universal group)
upvoted 2 times
Charchar
5 years, 7 months ago
Actually upon reading the solution again (but without actually testing it) I think it should work. Don't quote me on it though
upvoted 1 times
...
panda
5 years, 6 months ago
Thank you. I understood the deferences between this and No.242.
upvoted 2 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...