StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 352 of 506 · medium

A security baseline is applied to a DC, but administrators have not tested restoration or protected backup access. What should be completed?

Choose the single best answer.

  1. A.Store every recovery credential only on the DC being recovered
  2. B.Assume baseline compliance guarantees forest recovery
  3. C.Disable backups to avoid exposing secrets
  4. D.Protect directory backups and validate a controlled AD recovery path
Show the answer and explanation

✓ Correct answer

  • Protect directory backups and validate a controlled AD recovery path

Backup protection and tested recovery preserve both secrecy and availability. Disabling backups removes recovery, configuration compliance does not establish restoration, and sole storage on the failed directory creates a recovery dependency.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.