Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1. What should you do?
A.
Perform tombstone reanimation.
B.
Export and import data by using Dsamain.
C.
Perform a non-authoritative restore.
D.
Recover the items by using Active Directory Recycle Bin.
Suggested Answer:B🗳️
A group has been modified. Nothing has been deleted. Therefore, answers A and D will not work. Answer C would work if it was an authoritative restore, but not a non-authoritative restore. The solution is to recover an earlier copy of the group from a backup or active directory snapshot by using DSadmain.
Correct solution is to use Active Directory Recycle Bin
When you delete user account from the group, the group's forward-link attribute Member is modified and the user account is deleted, but the system preserves all link-valued (MemberOf back-link attribute) and non-linked-valued attributes. When you restore the user from AD Recycle Bin, it's membership is restored.
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements--level-100-#ad_recycle_bin_mgmt
Sorry, I failed to notice the users were removed, not deleted.
Correct answer is really B.
upvoted 3 times
...
...
This section is not available anymore. Please use the main Exam Page.70-743 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
pavlisek
4 years, 10 months agopavlisek
4 years, 10 months ago