AZ-802 Deploy and Manage AD DS Practice Question
You need to inspect the state of Active Directory objects as they existed three days ago to troubleshoot an issue. You have a system state backup from that time. Which TWO tools must you use to view the contents of the database from the backup without performing a full restore? (Each correct answer presents part of the solution.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ntdsutil
To view the contents of a past Active Directory database, you first use ntdsutil to mount the snapshot or recovered database file. Then, you use dsamain to expose that database as an LDAP directory service on a custom port. Once dsamain is running, standard tools like Active Directory Users and Computers can connect to that specific port.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Active Directory Sites and Services
Why it's wrong here
Active Directory Sites and Services is used to manage the physical topology of the network, including sites, subnets, and replication schedules. It does not provide the functionality to mount or view historical snapshots of the Active Directory database or to connect to alternative LDAP ports for database inspection purposes.
- ✓
ntdsutil
Why this is correct
The ntdsutil tool is essential for managing Active Directory snapshots. It allows an administrator to list available snapshots and mount them to the file system. Once mounted, the NTDS.dit file from the snapshot becomes accessible for the dsamain tool to use, providing the foundation for the offline database inspection process.
- ✓
dsamain
Why this is correct
The dsamain utility is used to expose the data from a mounted snapshot or a restored NTDS.dit file as a read-only LDAP instance. By specifying a unique port number, dsamain allows administrators to browse the historical state of the directory using standard LDAP tools without interfering with the live domain controller's operations.
- ✗
wbadmin
Why it's wrong here
The wbadmin command-line tool is used to create and manage system state and volume backups. While it is used to recover the files from the backup media to a disk location, it does not have the capability to mount those files as a searchable directory service or to browse the objects contained within the database.
- ✗
repadmin
Why it's wrong here
The repadmin tool is primarily used for monitoring and troubleshooting Active Directory replication between domain controllers. It provides detailed information about replication partners and metadata but cannot mount historical database snapshots or provide a mechanism for viewing the contents of an offline Active Directory database file from a backup.
About these practice questions
This AZ-802 question is part of Courseiva's 116-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.