Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-800 Exam - Topic 9 Question 57 Discussion

Actual exam question for Microsoft's AZ-800 exam
Question #: 57
Topic #: 9
[All AZ-800 Questions]

SIMULATION

Task 9

You plan to create group managed service accounts (gMSAs).

You need to configure the domain to support the creation of gMSAs.

Show Suggested Answer Hide Answer
Suggested Answer: A

To configure the domain to support the creation of gMSAs, you need to perform the following steps:

On a domain controller or a computer that has the Remote Server Administration Tools (RSAT) installed, open PowerShell as an administrator and run the following command to install the Active Directory module:

Install-WindowsFeature -Name RSAT-AD-PowerShell

Run the following command to create a Key Distribution Service (KDS) root key, which is required for generating passwords for gMSAs. You only need to do this once per domain:

Add-KdsRootKey -EffectiveImmediately

Wait for at least 10 hours for the KDS root key to replicate to all domain controllers in the domain. Alternatively, you can use the-EffectiveTimeparameter to specify a past date and time for the KDS root key, but this is not recommended for security reasons. For more information, seeAdd-KdsRootKey.

After the KDS root key is replicated, you can create and configure gMSAs using theNew-ADServiceAccountandSet-ADServiceAccountcmdlets. For more information, seeCreate a gMSAandConfigure a gMSA.


by Mari at Sep 17, 2024, 12:06 PM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ludivina
4 months ago
Sounds complicated, not sure if it's worth it.
upvoted 0 times
...
Jacquline
4 months ago
Yup, and don't forget about the Active Directory setup!
upvoted 0 times
...
Lucy
4 months ago
Wait, do you really need a KDS root key for this?
upvoted 0 times
...
Felix
4 months ago
Totally agree, it's a game changer for security!
upvoted 0 times
...
Haydee
5 months ago
gMSAs require Windows Server 2012 or later.
upvoted 0 times
...
Stephanie
5 months ago
I vaguely remember that we might need to use PowerShell to create the gMSA, similar to what we practiced in the lab.
upvoted 0 times
...
Elliott
5 months ago
I feel like there was something about needing to register the gMSA in the domain, but I’m a bit hazy on the exact steps.
upvoted 0 times
...
Otis
5 months ago
I think we need to ensure that the domain functional level is at least Windows Server 2012, but I can't recall if there are other requirements.
upvoted 0 times
...
Tegan
5 months ago
I remember we had a practice question about configuring Active Directory for gMSAs, but I'm not sure if it was about the specific permissions needed.
upvoted 0 times
...
Lai
5 months ago
This looks manageable. I'll take my time, read the question carefully, and methodically work through the configuration steps. Shouldn't be too difficult if I stay focused.
upvoted 0 times
...
Daren
5 months ago
Okay, let me think this through. I'll need to enable the necessary features and permissions in the domain. Hopefully the instructions are clear, but I may need to refer to the documentation just to be safe.
upvoted 0 times
...
Cherry
5 months ago
No problem, I've done this a few times before. I'll make sure to double-check the configuration settings to ensure I don't miss anything critical.
upvoted 0 times
...
Tijuana
5 months ago
Ugh, I'm not too familiar with gMSAs. I'll have to really focus on understanding the requirements and steps to set this up properly.
upvoted 0 times
...
Rikki
5 months ago
Hmm, this seems straightforward enough. I'll need to review the steps to configure the domain for gMSAs, but I think I can handle this.
upvoted 0 times
...
Margot
6 months ago
Based on my understanding of security roles, I believe the information system auditor is the one who inspects the security policies and procedures.
upvoted 0 times
...
Lai
1 year ago
Hmm, gMSAs, huh? Sounds like a great way to manage my monthly book club subscriptions. Where do I sign up?
upvoted 0 times
Ashleigh
1 year ago
C) Create a new group managed service account (gMSA)
upvoted 0 times
...
Devora
1 year ago
B) Create a Key Distribution Service (KDS) root key
upvoted 0 times
...
Gregoria
1 year ago
A) Configure the Active Directory schema to support gMSAs
upvoted 0 times
...
...
Dick
1 year ago
I'm not sure how to configure the domain for gMSAs, any tips?
upvoted 0 times
...
Eleonore
1 year ago
I agree, gMSAs can help with managing service accounts more efficiently.
upvoted 0 times
...
Glenn
1 year ago
I think creating gMSAs is important for security.
upvoted 0 times
...
Franklyn
1 year ago
Configuring the domain for gMSAs? Piece of cake. I bet I could do it with one hand tied behind my back and my eyes closed.
upvoted 0 times
...
Alex
2 years ago
Gotta love that gMSA action! Reminds me of my grandpa's group managed lawn service account. Good times.
upvoted 0 times
Maxima
1 year ago
I remember my grandpa's group managed lawn service account, good memories.
upvoted 0 times
...
Nicolette
1 year ago
D) Add the gMSA to the necessary groups
upvoted 0 times
...
Dewitt
1 year ago
C) Create a gMSA object
upvoted 0 times
...
Katie
1 year ago
Yeah, it's a great feature for managing service accounts.
upvoted 0 times
...
Raina
1 year ago
I'm excited to set up those gMSAs!
upvoted 0 times
...
Stephane
1 year ago
B) Create a KDS root key
upvoted 0 times
...
Francesco
1 year ago
A) Configure the Active Directory schema to support gMSAs
upvoted 0 times
...
...

Save Cancel