StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 346 of 506 · easy

A domain at DFL 2016 has a legacy application using NTLM. An employee can use it until added to Protected Users. What best explains the failure?

Choose the single best answer.

  1. A.Protected Users automatically converts the legacy application to Kerberos without an application change
  2. B.Protected Users group membership automatically disables the AD user account
  3. C.Protected Users removes all NTFS permissions from the user token
  4. D.Protected Users DC-side restrictions prohibit NTLM
Show the answer and explanation

✓ Correct answer

  • Protected Users DC-side restrictions prohibit NTLM

Protected Users prohibits NTLM at the supported DFL, exposing the application's dependency. Membership does not inherently disable the account or remove every ACL right, and it does not rewrite an NTLM-only application to use Kerberos.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.