StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure Windows Server operating system

Practice question 312 of 506 · medium

A GPO shows Credential Guard configured, but the administrator needs proof it is running. Which evidence is strongest?

Choose the single best answer.

  1. A.An administrator can find the file LsaIso.exe on disk
  2. B.Win32_DeviceGuard.SecurityServicesRunning includes 1
  3. C.The GPO editor shows Enabled
  4. D.A registry key exists with the requested value
Show the answer and explanation

✓ Correct answer

  • Win32_DeviceGuard.SecurityServicesRunning includes 1

SecurityServicesRunning reports actual operating state. An enabled editor setting, stored registry value, or executable file alone establishes configuration/presence rather than running isolation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.