StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure Windows Server operating system

Practice question 310 of 506 · easy

A domain-joined Windows Server 2025 member server meets platform requirements and has no explicit disable policy. Which default behavior is expected?

Choose the single best answer.

  1. A.Credential Guard available only after the server becomes a DC
  2. B.Credential Guard enabled without UEFI lock
  3. C.Credential Guard automatically protecting the full AD database
  4. D.Credential Guard enabled with mandatory UEFI lock
Show the answer and explanation

✓ Correct answer

  • Credential Guard enabled without UEFI lock

Eligible domain-joined non-DC Server 2025 systems default to Credential Guard without UEFI lock. It does not protect the full AD database, and becoming a DC excludes the documented default.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.