StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 43 of 506 · medium

A production forest has a new KDS root key and several DCs. Hosts attempt gMSA retrieval immediately and failures vary by DC. What is the most appropriate response?

Choose the single best answer.

  1. A.Allow documented convergence, verify replication, and retest retrieval
  2. B.Backdate every new key to bypass production replication
  3. C.Disable Kerberos on all service hosts
  4. D.Enter a chosen password into the gMSA service configuration
Show the answer and explanation

✓ Correct answer

  • Allow documented convergence, verify replication, and retest retrieval

The convergence period and healthy replication allow DCs to generate the same managed credentials reliably. Backdating is a lab shortcut, not a production repair. A gMSA uses generated managed passwords, and disabling Kerberos does not fix KDS readiness.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.