Home » Microsoft » 70-417 v.2 » What should you do?
You have the following Windows PowerShell output.
You need to create a Managed service Account.
What should you do?
A. Run Set-KDSConfiguration and then run New-ADServiceAccount -Name "service01"-DNSHostName service01.contoso.com
B. Run New-AuthenticationPolicySilo and then run New-ADServiceAccount -Name "service01" -DNSHostName service01.contoso.com
C. Run Add-KDSRootKey and then run New-ADServiceAccount -Name "service01"-DNSHostName service01.contoso.com
D. Run New-ADServiceAccount -Name "service01" -DNSHostName service01.contoso.com -SAMAccountName service01
Correct Answer: C
Explanation/Reference:
Explanation:
From the exhibit we see that the required key does not exist. First we create this key, then we create the managed service account.
The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution Service (KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys from the new root key.
The New-ADServiceAccount cmdlet creates a new Active Directory managed service account.
References: New-ADServiceAccount
https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspx
Add-KdsRootKey
https://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx
