Questions

You can test what you’ve learned about in this chapter by trying the following questions:

1. True or false: MDI identifies risky cloud-only account sign-ins.
   1. True
   2. False
2. Which of these is a primary advantage of using gMSAs instead of standard accounts?
   1. You can configure a gMSA using the command line and therefore automate it, which isn’t possible with standard accounts.
   2. Passwords are rotated automatically with gMSAs, unlike standard accounts.
   3. The MDI DSA doesn’t support standard user accounts, only gMSAs.
3. Which of the following should be configured to audit for event ID 8004?
   1. Recovery console: Allow floppy copy and access to all drives and folders
   2. Domain member: Disable machine account password changes
   3. Network security: Restrict NTLM: Audit Incoming NTLM Traffic
   4. System settings: Optional subsystems
4. What does Microsoft 365 Defender’s capability to action accounts contribute towards?
   1. Session policies
   2. Web content filtering
   3. Attack disruption
   4. Microsoft...