Securing Windows Server 2016 — Question 84

Your network contains two single-domain Active Directory forests named contoso.com and contosoadmin.com. Contosoadmin.com contains all of the user accounts used to manage the servers in contoso.com.
You need to recommend a workstation solution that provides the highest level of protection from vulnerabilities and attacks.
What should you include in the recommendation?

Answer options

• A. Provide a Privileged Access Workstation (PAW) for each user account in both forests. Join each PAW to the contoso.com domain.
• B. Provide a Privileged Access Workstation (PAW) for each user in the contoso.com forest. Join each PAW to the contoso.com domain.
• C. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contoso.com domain.
• D. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contosoadmin.com domain.

Correct answer: D

Explanation

The correct answer is D because providing a PAW for each administrator and joining it to the contosoadmin.com domain ensures that administrative users have a dedicated, secure environment for managing sensitive operations, reducing the risk of exposure to attacks. Options A, B, and C do not adequately address the need for the PAWs to be associated with the contosoadmin.com domain, which is essential for managing the user accounts securely.