Exam SC-200 topic 1 question 39 discussion

Option A, disabling legacy protocols, is not relevant to the question since it's a security measure that restricts the use of legacy protocols that may be less secure than modern protocols. Option B, enforcing LDAP signing, is also not relevant to the question since it's a security measure that ensures that LDAP traffic is signed and encrypted. Option D, installing the Local Administrator Password Solution (LAPS) extension, is not relevant to the question since it's a solution that automatically manages local administrator account passwords to help prevent credential theft. Therefore, the correct answer is C. Modify the properties of the computer objects listed as exposed entities.

C. Modify the properties of the computer objects listed as exposed entities. https://learn.microsoft.com/en-us/defender-for-identity/security-assessment-unconstrained-kerberos

correct C

This question was in the exam 27/04/2024.

correct C