Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 1 question 122 discussion

Actual exam question from Microsoft's 70-744

Question #: 122
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that run
Windows 10. All client computers are deployed from a customized Windows image.
You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.
Solution: You deploy 10 physical computers and configure them as virtualization hosts. You configure the operating system on each host as a PAW. You create a guest virtual machine by using the customized Windows image.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
References:
https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

by Anton2020 at April 1, 2020, 7:15 p.m.

Comments

Submit Cancel

Yebubbleman

4 years, 5 months ago

Answer should be A. A PAW host with a standard corporate system as the guest VM is fine. It's the inverse that's not acceptable per the security practices and principles stated in the 70-744 curriculum.

upvoted 1 times

...

SamsOtro

4 years, 6 months ago

Agree with Ario. Ridiculous wording.

upvoted 1 times

...

rayman456

4 years, 7 months ago

Thoughts on this? "In order to balance the need for security with the need for productivity, Microsoft recommends using one of these PAW hardware profiles: Dedicated hardware - Separate dedicated devices for user tasks vs. administrative tasks. Simultaneous Use - Single device that can run user tasks and administrative tasks concurrently by taking advantage of OS or presentation virtualization." https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/privileged-access-workstations

upvoted 1 times

...

KidCastaldo

4 years, 8 months ago

I agree with "Yes"

upvoted 4 times

KidCastaldo

4 years, 8 months ago

because the PAW is the host and the customized is the guest. If the customized image was the host and the PAW was the guest it would not meet requirements.

upvoted 2 times

...

Kamikazekiller

4 years, 10 months ago

Correct answer is A-YES

upvoted 4 times

...

psycho202

5 years ago

According to the following link, Answer A is correct: https://docs.microsoft.com/en-gb/windows-server/identity/securing-privileged-access/privileged-access-workstations?redirectedfrom=MSDN#simultaneous-use---adding-a-local-user-vm

upvoted 2 times

...

why_does_it_matter

5 years, 2 months ago

A. Yes

upvoted 4 times

...

Anton2020

5 years, 2 months ago

Can anyone explain why the answer is no? I thought the host is safe from the guest here, because the host is a PAW.

upvoted 1 times

Ario

5 years, 2 months ago

well Would be correct if state for each we create a guest vm

upvoted 1 times

...