StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 361 of 506 · medium

Which two account settings usually warrant removal unless a documented requirement exists? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Do not require Kerberos preauthentication
  2. B.Store password using reversible encryption
  3. C.Account is sensitive and cannot be delegated
  4. D.Require a tested smart-card path for interactive logon
Show the answer and explanation

✓ Correct answers

  • Do not require Kerberos preauthentication
  • Store password using reversible encryption

Preauthentication removal and reversible storage weaken credential protection. Nondelegation and an appropriately deployed smart-card requirement can strengthen selected accounts and are not the unsafe settings described.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.