Microsoft AZ-801 Exam - Topic 11 Question 26 Discussion

Actual exam question for Microsoft's AZ-801 exam

Question #: 26
Topic #: 11

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?

ARun the Device Guard and Credential Guard hardware readiness tool

BDisable the Turn on Virtual nation Based Security group policy setting

CRun dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters

Show Suggested Answer

Suggested Answer: B

by Cassi at Oct 26, 2022, 05:34 PM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sage

4 months ago

Is it really that straightforward? I have my doubts about A.

upvoted 0 times

...

Francoise

5 months ago

Wait, why would you disable Credential Guard at all? Seems risky!

upvoted 0 times

...

Rochell

5 months ago

I think B could be a better option, though.

upvoted 0 times

...

Tomas

5 months ago

Totally agree, A makes the most sense here.

upvoted 0 times

...

Mozell

5 months ago

A is the right move to check compatibility.

upvoted 0 times

...

Van

5 months ago

I have a vague memory of needing to enable some settings after disabling Credential Guard, but I can't remember which option that was.

upvoted 0 times

...

Dawne

5 months ago

I feel like running dism with those parameters could be a valid option, but I need to double-check if that's specifically for Credential Guard.

upvoted 0 times

...

Kiley

5 months ago

I remember the Device Guard tool being important for checking compatibility, but I can't recall if it's the next step after disabling Credential Guard.

upvoted 0 times

...