Exam 70-744 topic 1 question 94 discussion

Actual exam question from Microsoft's 70-744

Question #: 94
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You need to prevent NTLM authentication on Server1.
Solution: From a Group Policy, you configure the Kerberos Policy.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
References:
https://www.rootusers.com/implement-ntlm-blocking-in-windows-server-2016/

by Kamikazekiller at Aug. 9, 2020, 3:08 p.m.

Comments

Submit Cancel

SamsOtro

4 years, 6 months ago

Incorrect. NTLM disable is here: Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options

upvoted 3 times

BruceVolcanoShark

4 years, 5 months ago

Wrong. That's Security Options, not Kerebos Policy Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options vs Computer Configuration -> Windows Settings -> Security Settings -> Account Policies -> Kerberos Policy All of the NTLM policies are under Security Options not Kerebos Policy, therefor the answer is correct.

upvoted 2 times

...