AZ-801 · Question #194
Your domain contains five network containers an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup…
The correct answer is C. Computer (Kerberos V5). To implement a connection security rule between Active Directory domain member servers and workgroup servers, Computer (Kerberos V5) is specified as the authentication method.
Question
Exhibit
Options
- AUser (Kerberos V5)
- BComputer certificate
- CComputer (Kerberos V5)
- DComputer (NTLMv2)
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C81% (22)
- D7% (2)
Why each option
To implement a connection security rule between Active Directory domain member servers and workgroup servers, Computer (Kerberos V5) is specified as the authentication method.
User (Kerberos V5) authentication is for user-level access, not typically for establishing computer-level connection security rules, and it would not work for workgroup servers.
Computer certificates can provide mutual authentication between domain and workgroup servers, but the provided correct answer indicates a different method is expected.
Computer (Kerberos V5) authentication is the standard and most secure method for establishing connection security rules between computers that are members of the same Active Directory domain. While direct mutual Kerberos authentication with workgroup servers is not feasible, the question implies selecting the authentication method that domain member servers utilize in such a connection security rule context.
Computer (NTLMv2) is a challenge/response protocol primarily used for authenticating access to network resources and is not the designated authentication method for establishing IPsec connection security rules.
Concept tested: IPsec connection security rule authentication
Topics
Community Discussion
No community discussion yet for this question.
