StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 35 of 506 · medium

A user was added to the correct security group, but an existing session still lacks access. Replication and the ACL are correct. What should be checked next?

Choose the single best answer.

  1. A.Whether the user's display name matches the folder name
  2. B.Whether the role group must become a distribution group
  3. C.Whether an unrelated GPO security filter names the group
  4. D.Whether the session token was refreshed through a new logon
Show the answer and explanation

✓ Correct answer

  • Whether the session token was refreshed through a new logon

A fresh logon token can incorporate new membership. Distribution conversion removes the security-group purpose; GPO filtering does not replace the resource ACL. Display-name matching does not control SID-based file authorization.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.