Your network contains an Active Directory domain named contoso.com. The domain contains servers that run
Windows Server 2016.
You enable Remote Credential Guard on a server named Server1.
You have an administrative computer named Computer1 that runs Windows 10.
Computer1 is configured to require Remote Credential Guard.
You sign in to Computer1 as Contoso\\User1.
You need to establish a Remote Desktop session to Server1 as Contoso\\ServerAdmin1.
What should you do first?
A.
Install the Universal Windows Platform (UWP) Remote Desktop application
B.
Turn on virtualization based security
C.
Run the mstsc.exe /remoteGuard
D.
Sign in to Computer1 as Contoso\\ServerAdmin1
Explanation:
When Computer1 is configured to require Remote Credential Guard, you cannot use NTLM authentication to
specify (or impersonate) another user account when
connecting to Server1.
Therefore, you have to sign in to Computer1 as “ServerAdmin1” and use Kerberos for authenticating to RDP
server “Server1” when Remote Credential Guard is required.
D is correct
I was leaning towards C at first, but that is only needed when you dont have a GPO forcing Remoe Credential Guard.
“If you don’t use Group Policy in your organization, or if not all your remote hosts support Remote Credential Guard, you can add the remoteGuard parameter when you start Remote Desktop Connection to turn on Windows Defender Remote Credential Guard for that connection.”
https://docs.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard#reqs
7
0