Securing Windows Server 2016 — Question 145

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
The local administrator credentials of Server1 are managed by using the Local Administrator Password Solution (LAPS).
You need to retrieve the password of the Administrator account on Server1.
What should you do?

Answer options

• A. From Windows PowerShell on Server1, run the Get-ADFineGrainedPasswordPolicy cmdlet and specify the ""Credential parameter
• B. From Active Directory Users and Computers, open the properties of Server1 and view the value of the ms-Mcs-AdmPwd attribute
• C. From Active Directory Users and Computers, open the properties of Administrator and view the value of the userPassword attribute
• D. From Windows PowerShell on Server1, run the Get-ADUser cmdlet and specify the ""Credential parameter

Correct answer: B

Explanation

The correct method to retrieve the password for the Administrator account on Server1, which is managed by LAPS, is to view the ms-Mcs-AdmPwd attribute in the properties of Server1 within Active Directory Users and Computers. Options A and D do not pertain to LAPS management, and option C refers to a user attribute that does not apply to LAPS-controlled accounts.