StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 360 of 506 · medium

A user is configured not to require Kerberos preauthentication. What security concern should be raised?

Choose the single best answer.

  1. A.The setting automatically requires a smart card
  2. B.Unauthenticated AS requests can expose material for offline password attacks
  3. C.The setting guarantees AES-only authentication
  4. D.The setting prevents every NTLM relay attack
Show the answer and explanation

✓ Correct answer

  • Unauthenticated AS requests can expose material for offline password attacks

Removing preauthentication exposes AS-response material to unauthenticated requests. It does not force AES, prevent all NTLM relay, or require smart-card interactive logon.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.