Free AZ-800 Web TestEngine Demo

Q13 Hotspot

Case Study

Case Study 3

Overview

Company Information
ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.

Fabrikam Partnership

ADatum recently partnered with 2 company named Fabrikam, Inc.

Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.

Both companies intend to collaborate on several joint projects.

Existing Environment

ADatum AD DS Environment

The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com.

The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.

Fabrikam AD DS Environment

The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com.

The forest contains two domains named fabrikam.com and south.fabrikam.com.

The fabrikam.com domain contains an organizational unit (OU) named Marketing.

Server Infrastructure

The adatum.com domain contains the servers shown in the following table.

HyperV1 contains the virtual machines shown in the following table.

All the virtual machines on HyperV1 have only the default management tools installed.

SSPace1 contains the Storage Spaces virtual disks shown in the following table.

Azure Resources

ADatum has an Azure subscription that contains an Microsoft Entra tenant. Microsoft Entra Connect is configured to sync the adatum.com forest with Azure AD.

The subscription contains the virtual networks shown in the following table.

The subscription contains the Azure Private DNS zones shown in the following table.

The subscription contains the virtual machines shown in the following table.

All the servers are in a workgroup.

The subscription contains a storage account named storage1 that has a file share named share1.

Requirements

Planned Changes

ADatum plans to implement the following changes:

Sync Data1 to share1.
Configure an Azure runbook named Task1.
Enable Microsoft Entra users to sign in to Server1.
Create an Azure DNS Private Resolver that has the following configurations:
- Name: Private1
- Region: West US
- Virtual network: VNet1
- Inbound endpoint: SubnetB

HOTSPOT

You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

You plan to apply GPO1 to a global security group named Group1.

You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group.

You need to configure permissions for GPOI to meet the following requirements:

1. GPO1 must apply only to the users in Group1.
2. The solution must use the principle of least privilege.

Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Select the correct area(s) on the image.

AZ-800 Web TestEngine demo