Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.

contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You have 50 Azure virtual machines that run Windows Server.

You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for

Cloud.

Which extension should you enable on the virtual machines?

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have

Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named

Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1

is MOST subject to Credential Guard restrictions. What should you do next?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution; You enable event subscription on Server1.

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODQ named RODC1 You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?