Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-801 Exam - Topic 3 Question 95 Discussion

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1.You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?
D) Active Directory Sites and Services
A) dsmgmt.exe
B) dsamain.exe
C) net user

Microsoft AZ-801 Exam - Topic 3 Question 95 Discussion

Actual exam question for Microsoft's AZ-801 exam
Question #: 95
Topic #: 3
[All AZ-801 Questions]

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1.

You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Mattie at Jun 26, 2026, 12:47 PM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Curt
3 days ago
C is too broad for this task.
upvoted 0 times
...
Julene
8 days ago
But what about C) net user?
upvoted 0 times
...
Laine
13 days ago
It allows managing RODC settings.
upvoted 0 times
...
Buck
18 days ago
Why A?
upvoted 0 times
...
Laine
23 days ago
I’d go with A) dsmgmt.exe.
upvoted 0 times
...
Curt
29 days ago
I think it’s about least privilege.
upvoted 0 times
...
Marla
1 month ago
This question is tricky.
upvoted 0 times
...
Charlene
1 month ago
Wait, are you sure that's the only option?
upvoted 0 times
...
Gerry
1 month ago
Nope, dsmgmt.exe is definitely the way to go!
upvoted 0 times
...
Tamra
2 months ago
I thought you couldn't make local admins on RODCs?
upvoted 0 times
...
Bobbie
2 months ago
Totally agree, that's the right tool for the job!
upvoted 0 times
...
Emerson
2 months ago
You can use dsmgmt.exe for RODC local admin tasks.
upvoted 0 times
...
Celeste
2 months ago
I think dsmgmt.exe is the right tool, but I also wonder if there's a specific command we need to run to set User1 as a local admin on RODC1.
upvoted 0 times
...
Jettie
2 months ago
I feel like Active Directory Sites and Services is more about managing sites and replication, so it probably isn't the right choice here.
upvoted 0 times
...
Rashad
3 months ago
I remember practicing a similar question where we had to assign local admin rights, but I can't recall if it was through net user or something else.
upvoted 0 times
...
Stephen
3 months ago
I think we might need to use dsmgmt.exe since it deals with managing domain services, but I'm not entirely sure how it applies to RODC.
upvoted 0 times
...

Save Cancel