ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam
Go to Exam

Exam 70-742 topic 1 question 52 discussion

Actual exam question from Microsoft's 70-742
Question #: 52
Topic #: 1
[All 70-742 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table:

A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators groups in ForestA.
Solution: You create a universal group in DomainBRoot. You add users to the new group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators
by panda at Dec. 7, 2019, 1:50 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
panda
Highly Voted 5 years, 5 months ago
I think A(Yes) is correct. I think that you could add the universal group in ForestB to the Server Operators in ForestA. Because the Server Operators is one of Local Domain Group, You could add the universal group to the Server Operators if they are in same domain. Because the two-way forest trust has already existed between ForestA and ForestB, you could also do the previously operation if they are in different forest.
upvoted 13 times
GenjamBhai
4 years, 8 months ago
A is ok. UG from ForestB can be added to DLG in ForestA
upvoted 1 times
...
...
khalid86
Highly Voted 4 years, 11 months ago
For best understanding about groups everyone must watch the following link: https://www.youtube.com/watch?v=aPh8_RB8XEU
upvoted 7 times
...
VeiN
Most Recent 4 years, 7 months ago
Server Operators is Buildin Local group and acts like Domain Local. You can do it in 4 ways (let say user A from forrest A, needs to have Server Operators (SO) from forrest B): - Add user A directly as a member of SO from forrest B - Add user A to Global group forrest A, add this group as a member of AO from forrest B - Add user A to universal group forrest A, add this group as a member of SO from forrest B - Add user A to Global group and nest to universal group (all in forrest A), add universal group as a member of SO from forrest B For me its A (Correct) - 3rd way
upvoted 1 times
...
boishin
4 years, 10 months ago
B is correct - Cannot add UG from external trusted domain to DG. The group should be GG
upvoted 2 times
...
[Removed]
5 years, 3 months ago
I believe A is correct. Server Operators is a Domain Local group which can have as members user accounts, global groups and universal groups from any trusted domain (even from another forest if trusted). Therefore this configuration would work.
upvoted 6 times
...
manjonei
5 years, 3 months ago
I think B is correct. It is necessary to create a global group in each of B domains that contains the user accounts of the respective domains. Then, create a universal group in the root and add global groups to that group. Next, we will modify the Server Operators membership in Forest A
upvoted 2 times
lbs
4 years, 10 months ago
I agree. This is a cleaner approach
upvoted 1 times
lbs
4 years, 10 months ago
But Panda/Removed is right, it is possible to add a Universal group from a trusted forest to a Domain Local group of the trusting forest.
upvoted 2 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago