Exam AZ-801 All Questions

View all questions & answers for the AZ-801 exam

Exam AZ-801 topic 1 question 8 discussion

Actual exam question from Microsoft's AZ-801

Question #: 8
Topic #: 1

HOTSPOT -
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.
Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-methods

by xxxxx85xx at April 22, 2022, 4:29 p.m.

Comments

Submit Cancel

xxxxx85xx

Highly Voted 3 years ago

Correct - Require Kerberos V5 for both (minimize effort).

upvoted 8 times

...

BlackCat9588

Most Recent 2 months, 2 weeks ago

It should be GPO1 GPO1 Please let me know if I am worng

upvoted 1 times

...

starseed

7 months, 1 week ago

Both GPO1 is the answer

upvoted 1 times

...

fbx01

1 year, 2 months ago

GPO 1 FOR BOTH

upvoted 2 times

...

syu31svc

1 year, 12 months ago

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-methods Computer (NTLMv2). Selecting this option tells the computer to use and require authentication of the computer by using its domain credentials. This option works only with other computers that can use AuthIP. User-based authentication using Kerberos V5 isn't supported by IKE v1. User (NTLMv2). Selecting this option tells the computer to use and require authentication of the currently signed-in user by using their domain credentials, and uses the NTLMv2 protocol instead of Kerberos V5. This authentication method works only with other computers that can use AuthIP. User-based authentication using Kerberos V5 isn't supported by IKE v1. Answer is correct

upvoted 2 times

...

Burnie

2 years, 4 months ago

Correct. Computer and User (using Kerberos V5). Selecting this option tells the computer to use and require authentication of both the computer and the currently logged-on user by using their domain credentials. https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-methods

upvoted 3 times

...