ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam
Go to Exam

Exam 70-742 topic 1 question 51 discussion

Actual exam question from Microsoft's 70-742
Question #: 51
Topic #: 1
[All 70-742 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table:

A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators groups in ForestA.
Solution: In DomainBRoot, you add the users to the Server Operators group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators
by marerad at Nov. 25, 2019, 11:57 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 5 years, 3 months ago
This question is not specific enough. It could be either YES or NO for two possible scenarios: 1. If it is implying that we are trying to nest the Server Operators group from DomainB to the Server Operators group on DomainA, this cannot be done. Server Operators is a builtin Doman Local group. Domain Local groups can have as members only Domain Local groups from the same domain. Since we are working with different forests, the Server Operators group cannot have as members domain local group from other forests. In this scenario the answer would be NO. 2. The wording "modifying the membership of the Server Operators group on DomainA" leaves open for the possibility of adding users from other but trusted domains or forests into this group. This task could be accomplished and would work (so the answer would be YES), but this is not the recommended practice. The recommended way is to assign the users from DomanB to a global group on DomainB, than assign this to a universal group on DomainB, and than we can assign this group as a member of the Server Operators group on DomainA. Personally, I would go with NO.
upvoted 20 times
lbs
4 years, 10 months ago
Thanks for the good analysis!
upvoted 1 times
...
...
Kamikazekiller
Most Recent 4 years, 9 months ago
Correct answer is: B-NO
upvoted 1 times
...
khalid86
4 years, 12 months ago
Answr is NO. @[Removed] explanation 1 is correct.
upvoted 1 times
...
morlu
5 years, 1 month ago
Answer is Yes. Server Operators is a domain local group. You would add ForestB users (including the child domain users) to ForestBRoot's Server Operators, and then add the ForestBRoot Server Operator's Group to ForestARoot Server Operator's. Domain local groups can be added to another domain local group across a forest trust.
upvoted 2 times
JordanRR
4 years, 5 months ago
Server operators are an builtin local group and not a local domain (DL).
upvoted 1 times
...
...
Priet
5 years, 4 months ago
Imo this question should be A correct. Other site and refferences say the same. The solution provided seems to be legit and working.
upvoted 1 times
manjonei
5 years, 3 months ago
So... first you think that the correct answer should be A and finally you say that the given answer is correct which is B?? I don't understand. There are a few questions about this typo and I have so many doubts. Does anyone know the answer or can bring some light?
upvoted 3 times
manjonei
5 years, 3 months ago
I think the correct answer is B. User accounts created in child domains may be additional to those already created in root. It is necessary to create a global group that contains the user accounts of the respective domains. Then, create a universal group in the root and add global groups to that group. Next, we will modify the Server Operators membership
upvoted 3 times
...
...
...
marerad
5 years, 5 months ago
I can not find good answer in reference? am I missing on sth?
upvoted 1 times
GenjamBhai
4 years, 8 months ago
B is ok DL cannot nest DL from another domain https://activedirectoryfaq.com/2013/12/group-nesting-in-windows-domains/
upvoted 2 times
JordanRR
4 years, 5 months ago
Server operators are an integrated local group and not a local domain (DL).
upvoted 1 times
JordanRR
4 years, 5 months ago
Sorry, builtin* (not integrated) local group
upvoted 1 times
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago