StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 353 of 506 · easy

Which two measures directly reduce a DC's operating-system attack surface? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Install unrelated services to make use of spare capacity
  2. B.Use a supported patched OS with only needed roles and software
  3. C.Permit unrestricted browsing from a Domain Admin session
  4. D.Use Server Core when suitable and secure remote administration
Show the answer and explanation

✓ Correct answers

  • Use a supported patched OS with only needed roles and software
  • Use Server Core when suitable and secure remote administration

Minimal patched roles and a suitable Core/secure-administration design reduce exposure. Unrelated services and privileged browsing add attack opportunities on a directory authority.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.