Which two actions should you perform?

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2016.
You create a new bastion forest named admin.contoso.com. The forest functional level of admin.contoso.com is Windows Server 2012 R2.
You need to implement a Privileged Access Management (PAM) solution.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Raise the forest functional level of admin.contoso.com.
B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.
C. Configure contoso.com to trust admin.contoso.com.
D. Deploy Microsoft Identity Management (MIM) 2016 to contoso.com.
E. Raise the forest functional level of contoso.com.
F. Configure admin.contoso.com to trustcontoso.com.

microsoft-exams

8 thoughts on “Which two actions should you perform?

  1. wrong , the answer should be :

    A. Raise the forest functional level of admin.contoso.com.
    B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.

  2. Answers B and C are correct.

    PAM Scenario: Active Directory for bastion environment PAM forest:
    Windows Server 2012 R2 (NR)
    Windows Server 2016 *
    PAM Scenario: Active Directory for PAM scenario existing (CORP) forests:
    Windows Server 2008
    Windows Server 2008 R2 *
    Windows Server 2012 *
    Windows Server 2012 R2 *
    Windows Server 2016 *

    docs.microsoft.com/en-us/microsoft-identity-manager/microsoft-identity-manager-2016-supported-platforms

  3. is’s tricky
    contoso.com must be FFL 2012 R2
    admin.contoso.com must be FFL 2016!!!
    most guides do not pay attention to it becuase default FFL for WS2016 is 2016, so correct answers are:
    Raise the forest functional level of admin.contoso.com.
    Raise the forest functional level of contoso.com.
    and then deploy mim 2016 to admin.contoso.com

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.