StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 350 of 506 · easy

A DC currently runs a general-purpose browser and unrelated application utilities. Which change best reduces its attack surface?

Choose the single best answer.

  1. A.Rely solely on inbound firewall restrictions while retaining privileged browsing
  2. B.Remove unnecessary workloads and use a secured administrative endpoint
  3. C.Retain browser use because only privileged users launch it
  4. D.Apply a member-server baseline without checking DC-specific dependencies
Show the answer and explanation

✓ Correct answer

  • Remove unnecessary workloads and use a secured administrative endpoint

Removing unnecessary software and using secured administration reduces attack paths. Privileged-only browser use still exposes powerful credentials; inbound filtering does not remove risks from privileged browsing. A member-server baseline must not be assumed suitable for a DC's roles and dependencies.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.