Exam AZ-800 topic 2 question 28 discussion

Actual exam question from Microsoft's AZ-800

Question #: 28
Topic #: 2

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1.

On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users from the allowed groups.

You discover that all users can still sign in to Windows Admin Center.

You need to prevent unauthorized users from signing in to Windows Admin Center.

What should you do in Windows Admin Center?

A. Set Performance Profile to On.
B. Set Require manage-as sessions to re-authenticate to On.
C. From the Proxy settings, configure a bypass list.
D. Add a security group to the allowed groups.

Show Suggested Answer

Suggested Answer: D 🗳️

by Ksk08 at Oct. 15, 2024, 4:05 a.m.

Comments

Submit Cancel

stonwall12

5 months, 2 weeks ago

Selected Answer: D

Answer: D, security group After removing BUILTIN\Users, you must add a specific security group to the allowed groups list. Without adding an allowed group, Windows Admin Center defaults to allowing all users despite removing BUILTIN\Users. Adding a security group provides proper access control. Reference: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/user-access-options

upvoted 1 times

...

Krayzr

7 months, 1 week ago

Selected Answer: D

By adding a specific security group to the allowed groups, you can control which users have access to Windows Admin Center. This ensures that only authorized users within that security group can sign in https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/user-access-options

upvoted 1 times

...

Ni_yot

8 months ago

Selected Answer: D

there are a number of ways Windows Admin Center can be secured - https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/user-access-options

upvoted 2 times

...

Ksk08

8 months, 1 week ago

Answer should be D

upvoted 3 times

...