AZ-802 decision sheets

• Domain Admins vs Enterprise Admins vs Schema Admins: the credential for each AD DS operation
• PDC Emulator vs Infrastructure Master vs Schema Master vs RID Master: what each FSMO role does
• Global vs Domain Local vs Universal: choosing an AD DS group scope
• Startup RAM vs Smart Paging vs Discrete Device Assignment: what governs a Hyper-V VM's memory and passthrough devices
• Least-privilege Azure RBAC: the narrow built-in role for Arc, File Sync and Monitor alerts
• BitLocker recovery vs Windows LAPS vs DSRM password: three local credentials, three gotchas
• Secure channel failure vs KDC unreachable: diagnosing a domain sign-in error