Exam AZ-801 topic 5 question 19 discussion

Actual exam question from Microsoft's AZ-801

Question #: 19
Topic #: 5

Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured.
In the domain, you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1.
You need to ensure that Server1 is NOT subject to Credential Guard restrictions.
What should you do next?

A. Disable the Turn on Virtualization Based Security group policy setting.
B. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters.
C. Run the Device Guard and Credential Guard hardware readiness tool.

Show Suggested Answer

Suggested Answer: A 🗳️

by jecawi9630 at Jan. 21, 2023, 5:09 p.m.

Comments

Submit Cancel

BlackCat9588

4 months, 2 weeks ago

Selected Answer: A

A. Disable the Turn on Virtualization Based Security group policy setting.

upvoted 1 times

...

syu31svc

8 months ago

Selected Answer: A

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage If Windows Defender Credential Guard was enabled via Group Policy without UEFI Lock, Windows Defender Credential Guard should be disabled via Group Policy. Answer is A

upvoted 3 times

...

jecawi9630

11 months, 1 week ago

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage#disabling-windows-defender-credential-guard-using-group-policy

upvoted 4 times

...