A forest at DFL 2016 has Server 2016 and updated Server 2022 DCs. Which LAPS capability statement is correct?

Choose the single best answer.

A.LAPS encryption depends only on forest functional level and ignores DFL
B.All Server 2016 DCs automatically gain DSRM management from the DFL
C.Encryption is impossible until every DC runs Server 2022
D.AD password encryption is possible, but Server 2016 DCs cannot use Windows LAPS DSRM management

Show the answer and explanation

✓ Correct answer

AD password encryption is possible, but Server 2016 DCs cannot use Windows LAPS DSRM management

DFL 2016 enables LAPS AD encryption, while Server 2016 DCs lack current Windows LAPS DSRM management. The presence of Server 2016 does not prohibit encryption, and raising DFL does not install OS-level DSRM support. The relevant encryption requirement is the domain functional level.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.