StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure Windows Server operating system

Practice question 323 of 506 · medium

A production-signed Windows Server 2025 DC needs the correct role-aware baseline. Which scenario should be selected?

Choose the single best answer.

  1. A.AppControl\WS2025\DefaultPolicy\Audit
  2. B.SecurityBaseline/WindowsServer/2025/MemberServer
  3. C.SecurityBaseline/WindowsServer/2025/WorkgroupMember
  4. D.SecurityBaseline/WindowsServer/2025/DomainController
Show the answer and explanation

✓ Correct answer

  • SecurityBaseline/WindowsServer/2025/DomainController

DomainController matches the DC role. MemberServer and WorkgroupMember target different identities/roles; App Control audit is a code-control scenario rather than the full role security baseline.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.