Securing Windows Server 2016 — Question 74
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You need to prevent NTLM authentication on Server1.
Solution: From Windows PowerShell, you run the New-ADAuthenticationPolicy cmdlet.
Does this meet the goal?
Answer options
- A. Yes
- B. No
Correct answer: B
Explanation
The correct answer is B, as running the New-ADAuthenticationPolicy cmdlet alone does not disable NTLM authentication on Server1. Instead, further configuration is required to effectively prevent NTLM, such as modifying the security settings or using Group Policy to enforce these changes.