Your network contains an Active Directory Domain Services (AD DS) domain All domain members have...

Vendor: Microsoft
Product: AZ-801
Update on: May 9, 2026
Questions: 267

Microsoft AZ-801 Question Answer

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?

Run the Device Guard and Credential Guard hardware readiness tool

Disable the Turn on Virtual nation Based Security group policy setting

Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters