nerdexam
Microsoft

AZ-801 · Question #194

Your domain contains five network containers an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup…

The correct answer is C. Computer (Kerberos V5). To implement a connection security rule between Active Directory domain member servers and workgroup servers, Computer (Kerberos V5) is specified as the authentication method.

Secure Windows Server on-premises and hybrid infrastructures

Question

Your domain contains five network containers an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup servers that run Windows Server. You need to implement a connection security rule between the member servers and the workgroup servers. Which authentication method should you use?

Exhibit

AZ-801 question #194 exhibit

Options

  • AUser (Kerberos V5)
  • BComputer certificate
  • CComputer (Kerberos V5)
  • DComputer (NTLMv2)

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    81% (22)
  • D
    7% (2)

Why each option

To implement a connection security rule between Active Directory domain member servers and workgroup servers, Computer (Kerberos V5) is specified as the authentication method.

AUser (Kerberos V5)

User (Kerberos V5) authentication is for user-level access, not typically for establishing computer-level connection security rules, and it would not work for workgroup servers.

BComputer certificate

Computer certificates can provide mutual authentication between domain and workgroup servers, but the provided correct answer indicates a different method is expected.

CComputer (Kerberos V5)Correct

Computer (Kerberos V5) authentication is the standard and most secure method for establishing connection security rules between computers that are members of the same Active Directory domain. While direct mutual Kerberos authentication with workgroup servers is not feasible, the question implies selecting the authentication method that domain member servers utilize in such a connection security rule context.

DComputer (NTLMv2)

Computer (NTLMv2) is a challenge/response protocol primarily used for authenticating access to network resources and is not the designated authentication method for establishing IPsec connection security rules.

Concept tested: IPsec connection security rule authentication

Topics

#IPsec#Kerberos#Server Authentication#Windows Security

Community Discussion

No community discussion yet for this question.

Full AZ-801 Practice