Microsoft AZ-800 Exam - Topic 5 Question 68 Discussion

Actual exam question for Microsoft's AZ-800 exam

Question #: 68
Topic #: 5

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

You open a new branch office that contains only client computers.

You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Theron at Apr 07, 2025, 06:49 PM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alison

7 months ago

Definitely a good move to prioritize Site1!

upvoted 0 times

...

Lenny

7 months ago

I don't think that's enough for proper authentication.

upvoted 0 times

...

Rosalind

8 months ago

Sounds right, Site1 should handle the clients.

upvoted 0 times

...

Angelo

8 months ago

Wait, can a GPO really control authentication like that?

upvoted 0 times

...

Chau

8 months ago

Yes, that would work!

upvoted 0 times

...

Antonio

8 months ago

I remember reading that to ensure clients authenticate with a specific site, you might need to adjust the site link costs or something else. This GPO might not be enough.

upvoted 0 times

...

Cory

8 months ago

I feel uncertain about this one. I thought the GPO would help, but I can't recall if it actually directs clients to a specific site or just allows them to try others.

upvoted 0 times

...

Mona

9 months ago

I'm pretty sure that GPO setting is more about fallback options rather than prioritizing a specific site. I practiced a similar question where we had to ensure clients used a specific DC.

upvoted 0 times

...

Lashawn

9 months ago

I think configuring the Try Next Closest Site GPO might not actually force the clients to authenticate with Site1. I remember something about site links and how they affect authentication.

upvoted 0 times

...

Erick

9 months ago

Okay, I think I've got this. The Try Next Closest Site GPO setting will ensure the client computers in the new office try to authenticate with the domain controllers in Site1 first, before moving on to the other sites. Seems like a solid solution to me.

upvoted 0 times

...

Roselle

9 months ago

The key here is that we want the client computers in the new office to be primarily authenticated by the domain controllers in Site1. The Try Next Closest Site GPO setting sounds like it should do the trick, but I'll double-check the documentation just to be sure.

upvoted 0 times

...

Donte

9 months ago

Hmm, I'm not entirely sure about this one. The question mentions that the sites are connected by DEFAULTIPSITELINK, so I'm wondering if there's something more I need to consider regarding site links and site costs.

upvoted 0 times

...

Kimberely

10 months ago

I think the Try Next Closest Site Group Policy setting should work to ensure the client computers in the new office are primarily authenticated by the domain controllers in Site1. It seems like a straightforward solution.

upvoted 0 times

...

Toshia

1 year ago

I bet the client computers in the new office are going to be super excited to be 'primarily authenticated' by the domain controllers in Site1. That's the kind of thing that really gets them going!

upvoted 0 times

Silva

1 year ago

User3: Yes

upvoted 0 times

...

Mi

1 year ago

User2: No

upvoted 0 times

...

Stephanie

1 year ago

User1: Yes

upvoted 0 times

...

Almeta

1 year ago

I'm curious if the domain controllers in Site1 can handle the increased load from the new office. Might be worth considering load balancing or additional resources.

upvoted 0 times

...

Caitlin

1 year ago

This is a straightforward solution, and I think it should work well. The GPO setting will do the trick.

upvoted 0 times

Felix

1 year ago

User1: Definitely, it's a simple and effective way to achieve the goal.

upvoted 0 times

...

Maryann

1 year ago

User2: Agreed, it seems like the best solution to ensure the client computers are primarily authenticated by the domain controllers in Site1.

upvoted 0 times

...

Lonny

1 year ago

User1: Yes, that should work. The GPO setting will prioritize authentication from Site1.

upvoted 0 times

...

Raelene

1 year ago

I'm not sure, maybe we should consider other options as well.

upvoted 0 times

...

Lorean

1 year ago

I agree with Leontine, that should ensure the client computers in the new office are primarily authenticated by the domain controllers in Site1.

upvoted 0 times

...

Leonida

1 year ago

I agree, the Try Next Closest Site GPO setting will make the client computers in the new office prefer the domain controllers in Site1 for authentication.

upvoted 0 times

Luisa

1 year ago

A) Yes

upvoted 0 times

...

Cornell

1 year ago

That's correct, configuring the Try Next Closest Site GPO setting in Site1 will ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

upvoted 0 times

...

Jaime

1 year ago

A) Yes

upvoted 0 times

...

Leontine

1 year ago

I think the solution is to configure the Try Next Closest Site GPO in Site1.

upvoted 0 times

...

Lizette

1 year ago

Yes, the solution of configuring the Try Next Closest Site GPO setting in Site1 should meet the goal of ensuring the client computers in the new office are primarily authenticated by the domain controllers in Site1.

upvoted 0 times

Val

1 year ago

upvoted 0 times

...

William

1 year ago

A) Yes

upvoted 0 times

...