StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Server client IoT and OT security

Practice question 306 of 498 · hard

A team is preparing AD-backed encrypted Windows LAPS. Which two steps belong in the readiness checklist? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Assume schema preparation is required even for Entra-only backup
  2. B.Meet the DFL 2016+ requirement and update the LAPS AD schema
  3. C.Treat read access to ciphertext as automatic decryption authority
  4. D.Grant every authenticated user password-read rights
  5. E.Configure attribute access and the authorized decryption principal
Show the answer and explanation

✓ Correct answers

  • Meet the DFL 2016+ requirement and update the LAPS AD schema
  • Configure attribute access and the authorized decryption principal

Encrypted AD-backed deployment requires the domain prerequisite, schema preparation, and scoped access/decryption configuration. Broad read rights expose sensitive data. Entra-only backup does not require the AD schema steps. Ciphertext-read permission is distinct from decryption authority.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.