Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users
from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1.
What should you do?
A.
Perform tombstone reanimation.
B.
Export and import data by using Dsamain.
C.
Perform a non-authoritative restore.
D.
Recover the items by using Active Directory Recycle Bin.
Explanation:
A group has been modified. Nothing has been deleted. Therefore, answers A and D will not work. Answer C
would work if it was an authoritative restore, but not a non-authoritative restore.
The solution is to recover an earlier copy of the group from a backup or active directory snapshot by usingDSadmain.
Read the explanation carefully, this is indeed a trick question. for answer B see https://blogs.technet.microsoft.com/poshchap/2015/03/06/use-powershell-and-dsamain-exe-to-mount-a-backup-of-ntds-dit/
5
0
Answer: B
Use Dsamain to export and import data from a backup.
Group Memberships would not be restored from AC Recycle Bin or from tombstones.
A restore would need to be authoritative.
6
0