Exam 70-744 topic 1 question 72 discussion

Actual exam question from Microsoft's 70-744

Question #: 72
Topic #: 1

Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers.
You deploy the Local Administrator Password Solution (LAPS) to the network.
You discover that the members of a group named FinanceAdministartors can view the password of the local Administrator accounts on the servers in an organizational unit (OU) named FinanceServers.
You need to prevent the FinanceAdministartors members from viewing the local administrators "˜passwords on the servers in FinanceServers. Which permission should you remove from FinanceAdministartors?

A. all extended rights
B. read all properties
C. read permissions
D. list contents

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://4sysops.com/archives/set-up-microsoft-laps-local-administrator-password-solution-in-active-directory/

by KidCastaldo at Nov. 2, 2020, 2:21 p.m.

Comments

Submit Cancel

Timock

4 years, 3 months ago

If you do have users that shouldn’t be able to view the stored password information that show up in “ExtendedRightHolders,” you’ll need to remove their access to “All extended rights.” In Active Directory Users and Computers (ADUC), click View and ensure that you have Advanced Features checked. Right-click the OU name and then click Properties, Security, and Advanced. Answer: A

upvoted 1 times

...

SamsOtro

4 years, 5 months ago

A. Extended Rights - is correct

upvoted 3 times

...

KidCastaldo

4 years, 6 months ago

Given reference supports answer

upvoted 3 times

...

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 1 question 72 discussion

Comments

Timock

SamsOtro

KidCastaldo

SY0-701