Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table. [Table: Name, Domain controller, Configuration: fabrikam.com…

Secure Windows Server on-premises and hybrid infrastructures

Question

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table. [Table: Name, Domain controller, Configuration: fabrikam.com, DC1, PDC emulator; fabrikam.com, DC2, Infrastructure master; fabrikam.com, DC3, Read-only domain controller (RODC); eu.fabrikam.com, DC4, PDC emulator; eu.fabrikam.com, DC5, Infrastructure master; eu.fabrikam.com, DC6, Read-only domain controller (RODC)] You are implementing Microsoft Defender for Identity sensors. You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Exhibits

Explanation

Domain controllers that require the sensors: DC1 and DC4 only Authentication information that must be provided during the sensor installation: The access key generated by the Microsoft Defender for Identity portal. Justification: Every domain controller in the environment should be covered by a Defender for Identity sensor or standalone sensor. Reference: https://docs.microsoft.com/en-us/windows-server/identity/technical-faq#deployment ; https://docs.microsoft.com/en-us/defender-for-identity/install-step4

Topics

#Microsoft Defender for Identity#Active Directory#Domain Controller Deployment#Security Monitoring

Community Discussion

No community discussion yet for this question.

Full AZ-801 Practice