Securing Windows Server 2016 — Question 9

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?

Answer options

• A. From a command prompt, run the credwiz.exe command.
• B. From Task Manager, review the processes listed on the Details tab.
• C. From Server Manager, click Local Server, and review the properties of Server1.
• D. From Windows PowerShell, run the Get-WsManCredSSP cmdlet.

Correct answer: B

Explanation

The correct answer is B because reviewing the processes in the Details tab of Task Manager allows you to see if Credential Guard is running. The other options do not provide the necessary information to confirm if Credential Guard is enabled; for example, credwiz.exe is for configuring, not verifying, and the properties in Server Manager may not indicate the status of Credential Guard.