AZ 801 Quiz

Which of the following is a feature of Microsoft Defender Credential Guard?

• Isolates user credentials within a virtualized container

• Encrypts all network traffic by default

• Provides antivirus protection

• Blocks all incoming connections

What must be ensured before blocking NTLM authentication?

• All user accounts are migrated to a new domain

• Existing applications are no longer using the NTLM protocol

• All servers are upgraded to Windows Server 2016

• Multi-factor authentication is enabled for all users

Which policy can be configured to audit NTLM authentication in a domain?

• Network security: Audit account logon events

• Network security: Restrict NTLM: Audit Incoming NTLM Traffic

• Network security: Allow log on locally

• Network security: Force logoff when logon hours expire

What is the primary goal of the principle of least privilege when configuring user account rights?

• Maximizing user access to all systems

• Granting users only the rights and privileges they need to perform their tasks

• Ensuring users can install any software they need

• Allowing users to manage their own passwords

Which of the following is NOT a requirement for Microsoft Defender Credential Guard?

• Windows 10 Enterprise or Windows Server 2016

• 64-bit CPU

• Active Directory Certificate Services

• UEFI firmware version 2.3.1.c or newer

What action should be taken to find user accounts that have not signed in within the last 90 days using PowerShell?

• Get-ADUser -Filter {Enabled -eq $true -and PasswordNeverExpires -eq $true}

• Get-ADUser -Filter {LastLogonTimeStamp -lt (Get-Date).AddDays(-90) -and enabled -eq $true} -Properties LastLogonTimeStamp

• Search-ADAccount -AccountInactive

• Find-User -Inactive

Which of the following should be implemented to ensure that local administrator passwords are unique and regularly changed?

• Microsoft Defender Credential Guard

• Local Administrator Password Solution (LAPS)

• BitLocker Drive Encryption

• NTLM authentication blocking

Which feature does NOT support by Windows Defender Credential Guard?

• NTLMv1 or MS-CHAPv2

• Kerberos DES encryption

• Digest authentication

• SSL/TLS encryption

What is a key benefit of implementing a split-horizon DNS?

• Simplifies management by using a single namespace

• Enhances security by separating internal and external DNS records

• Reduces the need for firewall configurations

• Increases the number of required DNS servers

Which tool helps verify the effects of GPO settings on a local host?

• Policy Analyzer tool

• LGPO tool

• WSUS

• Azure Update Management