nerdexam
Microsoft

AZ-801 · Question #31

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server. You need to ensure that the ServerS…

The correct answer is A. the COM+ Network Access (DCOM-In) rule. To enable remote management from Server1 to Server2 using a management console with least privilege, enabling specific Windows Defender Firewall rules is necessary on Server2.

Secure Windows Server on-premises and hybrid infrastructures

Question

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server. You need to ensure that the ServerS management console to manage Server2. The solution must use the principle of least privilege. Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • Athe COM+ Network Access (DCOM-In) rule
  • Ball the rules in the Remote Event Log Management group
  • Cthe Windows Management Instrumentation (WMI-In) rule
  • Dthe COM+ Remote Administration (DCOM-In) rule

How the community answered

(30 responses)
  • A
    83% (25)
  • B
    10% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

To enable remote management from Server1 to Server2 using a management console with least privilege, enabling specific Windows Defender Firewall rules is necessary on Server2.

Athe COM+ Network Access (DCOM-In) ruleCorrect

The COM+ Network Access (DCOM-In) rule allows DCOM traffic, which is essential for many remote administration tools and services to communicate across the network. Enabling this rule ensures that DCOM-based management console components on Server1 can interact with Server2, adhering to the principle of least privilege by opening only the required DCOM port.

Ball the rules in the Remote Event Log Management group

Enabling all rules in the Remote Event Log Management group is too broad for general server management and specifically targets event log access, not comprehensive console functionality.

Cthe Windows Management Instrumentation (WMI-In) rule

While Windows Management Instrumentation (WMI-In) is often used for remote management, the specific 'ServerS management console' might rely on DCOM, making the COM+ Network Access rule distinctively required.

Dthe COM+ Remote Administration (DCOM-In) rule

The COM+ Remote Administration (DCOM-In) rule is related to DCOM, but the 'COM+ Network Access' rule is often the broader and more encompassing rule required for general DCOM communication used by various remote management tools.

Concept tested: Windows Defender Firewall remote management rules

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-dcom-for-advanced-firewall

Topics

#Windows Firewall#Remote Management#DCOM#Least Privilege

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-801 Practice