StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 356 of 506 · medium

An authorized admin loses DC RDP after a deny right targets a group containing that admin through nesting. What should be investigated?

Choose the single best answer.

  1. A.Only whether the password meets minimum length
  2. B.Effective deny membership and the required recovery/management access policy
  3. C.Only whether the forest trust is transitive
  4. D.Only whether TCP 3389 is listening
Show the answer and explanation

✓ Correct answer

  • Effective deny membership and the required recovery/management access policy

The nested deny directly blocks the logon despite other allows. Listener status, trust transitivity, and password length alone do not resolve a user-right denial caused by group membership.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.