Securing Windows Server 2016 — Question 107

Your network contains an Active Directory forest named corp.contoso.com.
You are implementing Privileged Access Management (PAM) by using a bastion forest named priv.contoso.com.
You need to create shadow groups in priv.contoso.com.
Which cmdlet should you use?

Answer options

• A. New-RoleGroup
• B. New-PamRole
• C. New-ADGroup
• D. New-PamGroup

Correct answer: D

Explanation

The correct answer is D, New-PamGroup, as it is specifically designed to create shadow groups in a PAM setup. Options A, B, and C do not pertain to shadow group creation in a PAM context, making them unsuitable for this task.