StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Server client IoT and OT security

Practice question 304 of 498 · hard

A domain has DFL 2016 and both Server 2016 and LAPS-capable Server 2019 DCs. Which DSRM design is supported?

Choose the single best answer.

  1. A.Back up all DSRM passwords only to Entra ID
  2. B.Manage DSRM identically on every Server 2016 DC
  3. C.Disable encryption and manage DSRM in clear text
  4. D.Manage DSRM passwords on the supported Server 2019+ DCs with AD encryption enabled
Show the answer and explanation

✓ Correct answer

  • Manage DSRM passwords on the supported Server 2019+ DCs with AD encryption enabled

At DFL 2016+, supported Server 2019+ DCs can use LAPS DSRM management with AD encryption. Server 2016 DCs do not support that feature. Entra ID backup and clear-text DSRM backup are unsupported.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.