Exam 70-744 topic 1 question 118 discussion

Actual exam question from Microsoft's 70-744

Question #: 118
Topic #: 1

Your company has an accounting department.
The network contains an Active Directory domain named contoso.com. the domain contains 10 servers.
You deploy a new server named Server11 that runs Windows Server 2016. Server11 will host several network applications and network shares used by the accounting department.
You need to recommend a solution for Server11 that meets the following requirements:
✑ Protects Server11 from address spoofing and session hijacking
Allows only the computers in the accounting department to connect to Server11

What should you recommend implementing?

A. Just Enough Administration (JEA)
B. AppLocker rules
C. Privileged Access Management (PAM)
D. connection security rules

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://support.microsoft.com/en-us/help/942957/security-rules-for-windows-firewall-and-for-ipsec-based-connections-in

by Kamikazekiller at Aug. 9, 2020, 3:18 p.m.

Comments

Submit Cancel

Yebubbleman

4 years, 5 months ago

A. Just Enough Administration (JEA) - provides selective access; not appicable to the scenario B. AppLocker rules - Application whitelisting; not applicable to the scenario C. Privileged Access Management (PAM) - Also selective access; not applicable to the scenario

upvoted 1 times

...

SamsOtro

4 years, 6 months ago

D. connection security rules - is correct.

upvoted 3 times

...

xosol

4 years, 7 months ago

This answer appears correct. It refers to using IPsec - it will enable both requirements.

upvoted 4 times

...