Exam AZ-801 topic 1 question 32 discussion

YYY For 3rd part:- Protocol: As with Server2, file sharing uses SMB over TCP. Connection Security Rule Impact: Server1: Requires inbound TCP connections to authenticate using Kerberos V5. Server3: No connection security rule is specified, meaning it doesn’t inherently require authentication for its outbound traffic. When Server3 initiates an SMB connection to Server1, Server1’s rule mandates authentication for the incoming TCP traffic. Server3, being domain-joined, supports Kerberos V5 authentication by default in an AD DS environment. Although Server3 lacks an explicit IPsec rule, Windows domain-joined computers can respond to IPsec authentication requests (like Server1’s) using Kerberos without needing a matching outbound rule. Server1’s "Require inbound" setting enforces authentication on the connection, and Server3 can comply, establishing a secure TCP session.

YYN Please let me know if I am wrong

My answer is YYN Seem no connection security rule information for Server 3. Assumed no rule for Server 3. and Server 1 is "require" so that the Q3 is N.