Exam 70-744 topic 1 question 20 discussion

Actual exam question from Microsoft's 70-744

Question #: 20
Topic #: 1

Your network contains two single-domain Active Directory forests named contoso.com and contosoadmin.com. Contosoadmin.com contains all of the user accounts used to manage the servers in contoso.com.
You need to recommend a workstation solution that provides the highest level of protection from vulnerabilities and attacks.
What should you include in the recommendation?

A. Provide a Privileged Access Workstation (PAW) for each user account in both forests. Join each PAW to the contoso.com domain.
B. Provide a Privileged Access Workstation (PAW) for each user in the contoso.com forest. Join each PAW to the contoso.com domain.
C. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contoso.com domain.
D. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contosoadmin.com domain.

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/privileged-access-workstations

by Kamikazekiller at Aug. 3, 2020, 8:09 p.m.

Comments

Submit Cancel

Kamikazekiller

Highly Voted 4 years, 10 months ago

given answer D is correct.

upvoted 5 times

...

Yebubbleman

Most Recent 4 years, 5 months ago

D seems most obvious here.

upvoted 1 times

Yebubbleman

4 years, 5 months ago

Yeah, definitely anything suggesting that you join a PAW to the non-administrative domain should be immediately discounted as rubbish considering that completely defeats the entire point of having the administrative forest to begin with!

upvoted 1 times

...

SamsOtro

4 years, 7 months ago

Agreed, D is correct

upvoted 2 times

...