AZ-802 · Monitoring and troubleshooting · Monitoring and troubleshooting | Troubleshoot Active Directory

Practice question 505 of 506 · medium

A Windows member server, not a domain controller, reports that its trust relationship failed after a restore. DNS and connectivity to a writable DC are working. Which next step is appropriate with authorized credentials?

Choose the single best answer.

A.Run Test-ComputerSecureChannel on a DC and use that result as a supported diagnosis for the member server
B.Reset the interactive user password and assume this resets the member computer-account secret
C.Test and, if needed, repair the member server's secure channel using the supported member-server command and verify domain authentication
D.Purge cached user Kerberos tickets and assume this permanently reconciles mismatched local and AD machine passwords

Show the answer and explanation

✓ Correct answer

Test and, if needed, repair the member server's secure channel using the supported member-server command and verify domain authentication

On a member server, the supported secure-channel test/repair can address the computer-account password mismatch after restore; verify actual domain authentication afterward. User password resets and ticket purges do not reconcile the machine secret, and Test-ComputerSecureChannel is not valid for DC secure-channel diagnosis.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.