Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains an organizational unit (OU) named OU1. OU1 contains servers that run sensitive workloads

Secure Windows Server on-premises and hybrid infrastructures

Question

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains an organizational unit (OU) named OU1. OU1 contains servers that run sensitive workloads. You plan to add connection security rules that meet the following requirements: - The servers in OU1 must only accept connections from domain-joined - The servers in OU1 must only be able to communicate with domain-joined You create a Group Policy Object (GPO) named GPO1 and link GPO1 to contoso.com. You need to configure a connection security rule in GPO1 by using Windows Defender Firewall with Advanced Security. How should you configure the rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Exhibit

Explanation

Rule type: Isolation Isolation rules are used to enforce authentication for network traffic. (Authentication exemption rules are used to specify traffic that should be exempt from the authentication requirements. And Tunnel rules are used to secure traffic between endpoints, typically used for VPN). Requirements: Require authentication for inbound and outbound connections This is being stressed in this certification, the difference between required and requested. Authentication Method: Computer (Kerberos V5) This will ensure that only domain-joined computers (which use Kerberos for authentication) can communicate with the servers.

Topics

#Group Policy#Windows Defender Firewall#Connection Security Rules#Network Security

Community Discussion

No community discussion yet for this question.

Full AZ-801 Practice