StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 365 of 506 · medium

Which two controls protect built-in administrative group authority? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Restrict and audit changes to privileged group membership
  2. B.Keep high-impact memberships justified and time-scoped where appropriate
  3. C.Use built-in operator groups for every narrow support task
  4. D.Assume an OU move removes protected-account permissions
Show the answer and explanation

✓ Correct answers

  • Restrict and audit changes to privileged group membership
  • Keep high-impact memberships justified and time-scoped where appropriate

Controlled membership and auditing limit privileged authority. Operator groups can grant excessive rights, and OU relocation alone does not remove protected-account ACL behavior.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.