You have the following Windows PowerShell Output.
You need to create a Managed Service Account.
What should you do?
A.
Run New-ADServiceAccount –Name “service01” –DNSHostName service01.contoso.com –
SAMAccountName service01.
B.
Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.
C.
Run Add-KDSRootKey, and then run New-ADServiceAccount –Name “service01” –DNSHostName
service01.contoso.com.
D.
Run Set-KDSConfiguration, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.
Explanation:
From the exhibit we see that the required key does not exist. First we create this key, then we create the
managed service account.
The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution Service
(KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys from the new
root key.
The New-ADServiceAccount cmdlet creates a new Active Directory managed service account.
New-ADServiceAccount
https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspx
Add-KdsRootKey
ttps://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx