Your network contains an Active Directory forest.
You implement Dynamic Access Control in the forest.
You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.)
The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.)
The output of Whoa mi /claims for a user named User2 is shown in the Whoa mi exhibit. (Click the Exhibit
button.)
Select Yes if the statement can be shown to be true based on the available information; otherwise select No.
Each correct selection is worth one point.Hot Area:
Answer: 
Explanation:
How you can know the 3th? Thanks in advance!
0
0
I ran a whoami /claims on a server as a test and it specifically said “user claim unknown” and “Kerberos support for Dynamic Access Control on this device has been disabled.”
0
0
The fact that running whoami /claims detects that no claims are configured means that DAC is supported and enabled.
If the state is unknown as per Crocogator comment, then Kerberos support for DAC is disabled
2
0
Answer Correct!
2
0
explain the first and second please?
0
0
Note that in the PowerShell screenshot the path is “C:\Users\user2”, that proves that the command was ran by user2 supposedly on user2’s computer.
It doesn’t have claims, hence question 2 is NO.
The command ran and returned an answer, so answer to question 3 is YES.
0
0