AZ-802 Deploy and Manage AD DS Practice Question
You are the administrator of a large multi-domain forest. You have a branch office with a slow WAN link that contains only one domain controller. Users in this office complain that they cannot log on when the WAN link is down, even though they belong to Universal Groups. How should you resolve this issue while minimizing WAN traffic?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Universal Group Membership Caching (UGMC) for the branch office site.
In a multi-domain forest, a domain controller needs to contact a Global Catalog to determine Universal Group membership during logon. If a GC is not available locally and the WAN link is down, logons fail. Enabling Universal Group Membership Caching allows a standard DC to cache these memberships, enabling successful logons during outages without the overhead of hosting a full GC.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable Universal Group Membership Caching (UGMC) for the branch office site.
Why this is correct
Universal Group Membership Caching is specifically designed for branch offices with limited bandwidth. It allows a non-GC domain controller to cache the group memberships of users who have previously logged on. This ensures that future logon requests can be processed locally even if the WAN link to a Global Catalog is unavailable.
- ✗
Configure the branch office domain controller as a Global Catalog server.
Why it's wrong here
While making the server a Global Catalog would solve the logon issue, it would also significantly increase WAN traffic. A Global Catalog must replicate a partial attribute set for every object in the entire forest. In a large forest with a slow WAN link, this extra replication traffic could saturate the available bandwidth.
- ✗
Convert all Universal Groups to Global Groups.
Why it's wrong here
Converting groups is often not feasible due to the different scopes and nesting rules. Global groups can only contain members from the same domain, whereas Universal groups are used to grant permissions across the forest. Changing the group type would break the existing administrative model and potentially disrupt access to resources across the forest.
- ✗
Increase the replication frequency of the Site Link to 15 minutes.
Why it's wrong here
Increasing replication frequency does not solve the problem of a completely disconnected WAN link. If the link is down, no replication can occur regardless of the configured interval. Furthermore, more frequent replication would actually increase the total bandwidth consumption on the already slow link, worsening the performance for other branch office traffic.
Visual reference
About these practice questions
This AZ-802 question is part of Courseiva's 116-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.