Knowledge Check: Microsoft Exam
AZ800: Post-Assessment Quiz
When installing Active Directory the very first time, which of the following deployment operation options
should an administrator select in the Deployment Configuration window?
a. Add a domain controller to an existing domain
b. Add a new domain to an existing forest
c. Add a new forest
d. Add a Domain Name System (DNS) server - correct answer ✔✔c. Add a new forest
All the information in the Active Directory database is organized as _______.
a. objects
b. schemas
c. user accounts
d. groups - correct answer ✔✔a. objects
A server or workstation just became a domain member. By default, in which folder of Active Directory
would you find the computer account created for this server or workstation?
a. Domain Controllers
b. Computers
c. Builtin
d. Users - correct answer ✔✔b. Computers
Which of the following is the broadest logical component of the Active Directory structure?
a. A tree
b. A domain
c. A forest
d. An organization unit (OU) - correct answer ✔✔c. A forest
,In which order are GPO applied?
a. the local computer, site, domain, and OU
b. the local computer, domain, site, and OU
c. OU, domain, site, and the local computer
d. OU, site, domain, and the local computer - correct answer ✔✔a. the local computer, site, domain, and
OU
On the Account tab of the Account Properties window, what option is used to specify that an account
only signs into designated computers?
a. Log on Hours
b. Log On To
c. Account options
d. Unlock account - correct answer ✔✔b. Log On To
Which of the following is the most likely reason that a user signing into a computer on a large network
cannot access domain resources?
a. The user account is a local account.
b. The user account isn't present in the local Users and Groups.
c. The user entered an incorrect password.
d. The user signed in as the administrator. - correct answer ✔✔a. The user account is a local account.
In single-domain environments or when users from only one domain are assigned access to a resource,
which of the following processes is recommended for assigning rights and permissions to domain
resources?
a. Accounts are made members of Global groups, which are made members of Universal groups, which
are then assigned permissions to resources
b. Accounts are made members of Universal groups, which are made members of Global groups, which
are then assigned permissions to resources
c. Accounts are made members of Global groups, which are made members of Domain Local groups,
which are then assigned permissions to resources
, d. Accounts are made members of Domain Local groups, which are made members of Global groups,
which are then assigned permissions to resources - correct answer ✔✔c. Accounts are made members
of Global groups, which are made members of Domain Local groups, which are then assigned
permissions to resources
What does the command below accomplish?redircmp ou=MemberComputers,dc=csmtech,dc=corp
a. Change the default location of computer accounts.
b. Join a computer to a domain.
c. Join a computer to a domain by using PowerShell.
d. Perform an offline domain join. - correct answer ✔✔a. Change the default location of computer
accounts.
Identify the elements of the following service principal name (SPN): HTTP/www.csmtech.com.
a. Service type: HTTP, Instance name: www.csmtech.com, Port number: blank, Service name: blank
b. Service type: HTTP, Instance name: www, Port number: csmtech, Service name: com
c. Service type: HTTP, Instance name: blank, Port number: blank, Service name: www.csmtech.com
d. Service type: HTTP, Instance name: www.csmtech.com, Port number: 80, Service name:
www.csmtech.com - correct answer ✔✔d. Service type: HTTP, Instance name: www.csmtech.com, Port
number: 80, Service name: www.csmtech.com
Which type of active directory doesn't support domain join?
a. Windows Active Directory
b. Azure Active Directory (AAD)
c. Azure Active Directory DS (AADDS)
d. Azure AD Connect - correct answer ✔✔b. Azure Active Directory (AAD)
When integrating an on-premises server environment with Azure Active Directory services, where should
the changes to the directory in Azure Active Directory DS (AADDS) occur?
a. Azure Active Directory (AAD)
b. AADDS itself
c. on-premises domain controllers
AZ800: Post-Assessment Quiz
When installing Active Directory the very first time, which of the following deployment operation options
should an administrator select in the Deployment Configuration window?
a. Add a domain controller to an existing domain
b. Add a new domain to an existing forest
c. Add a new forest
d. Add a Domain Name System (DNS) server - correct answer ✔✔c. Add a new forest
All the information in the Active Directory database is organized as _______.
a. objects
b. schemas
c. user accounts
d. groups - correct answer ✔✔a. objects
A server or workstation just became a domain member. By default, in which folder of Active Directory
would you find the computer account created for this server or workstation?
a. Domain Controllers
b. Computers
c. Builtin
d. Users - correct answer ✔✔b. Computers
Which of the following is the broadest logical component of the Active Directory structure?
a. A tree
b. A domain
c. A forest
d. An organization unit (OU) - correct answer ✔✔c. A forest
,In which order are GPO applied?
a. the local computer, site, domain, and OU
b. the local computer, domain, site, and OU
c. OU, domain, site, and the local computer
d. OU, site, domain, and the local computer - correct answer ✔✔a. the local computer, site, domain, and
OU
On the Account tab of the Account Properties window, what option is used to specify that an account
only signs into designated computers?
a. Log on Hours
b. Log On To
c. Account options
d. Unlock account - correct answer ✔✔b. Log On To
Which of the following is the most likely reason that a user signing into a computer on a large network
cannot access domain resources?
a. The user account is a local account.
b. The user account isn't present in the local Users and Groups.
c. The user entered an incorrect password.
d. The user signed in as the administrator. - correct answer ✔✔a. The user account is a local account.
In single-domain environments or when users from only one domain are assigned access to a resource,
which of the following processes is recommended for assigning rights and permissions to domain
resources?
a. Accounts are made members of Global groups, which are made members of Universal groups, which
are then assigned permissions to resources
b. Accounts are made members of Universal groups, which are made members of Global groups, which
are then assigned permissions to resources
c. Accounts are made members of Global groups, which are made members of Domain Local groups,
which are then assigned permissions to resources
, d. Accounts are made members of Domain Local groups, which are made members of Global groups,
which are then assigned permissions to resources - correct answer ✔✔c. Accounts are made members
of Global groups, which are made members of Domain Local groups, which are then assigned
permissions to resources
What does the command below accomplish?redircmp ou=MemberComputers,dc=csmtech,dc=corp
a. Change the default location of computer accounts.
b. Join a computer to a domain.
c. Join a computer to a domain by using PowerShell.
d. Perform an offline domain join. - correct answer ✔✔a. Change the default location of computer
accounts.
Identify the elements of the following service principal name (SPN): HTTP/www.csmtech.com.
a. Service type: HTTP, Instance name: www.csmtech.com, Port number: blank, Service name: blank
b. Service type: HTTP, Instance name: www, Port number: csmtech, Service name: com
c. Service type: HTTP, Instance name: blank, Port number: blank, Service name: www.csmtech.com
d. Service type: HTTP, Instance name: www.csmtech.com, Port number: 80, Service name:
www.csmtech.com - correct answer ✔✔d. Service type: HTTP, Instance name: www.csmtech.com, Port
number: 80, Service name: www.csmtech.com
Which type of active directory doesn't support domain join?
a. Windows Active Directory
b. Azure Active Directory (AAD)
c. Azure Active Directory DS (AADDS)
d. Azure AD Connect - correct answer ✔✔b. Azure Active Directory (AAD)
When integrating an on-premises server environment with Azure Active Directory services, where should
the changes to the directory in Azure Active Directory DS (AADDS) occur?
a. Azure Active Directory (AAD)
b. AADDS itself
c. on-premises domain controllers
