You are the system administrator at an organization. Most of the servers in your organization, including domain controllers, are running Windows Server 2012 and above. Some servers, excluding domain controllers, are running Windows Server 2008 R2. Most of the clients are running Windows 10, but a few systems are running Windows 7. You have been tasked with improving the security measures of the Active Directory forest by restricting malicious access to Active Directory. You decide to use Privilege Access Management. What should you do next?
A) Update the clients that are running Windows 7 to Windows 10
B) Update the servers running Windows Server 2008 R2 to Windows Server 2019
C) Update all the domain controllers running Windows Sever 2012 to Windows Server 2016
D) Revert the domain functional level of each domain in the forest to Windows Server 2016

Question

Quizplus · Accepted Answer

Privilege Access Management is a security feature in Windows Server 2016 that allows administrators to limit access to Active Directory. To use PAM, all domain controllers in the forest need to be running at least Windows Server 2016. Updating the clients and servers can improve security, but it is not necessary for implementing PAM. Reverting the domain functional level is also not necessary and can cause issues if there are other applications that rely on higher functional levels. Thus, updating the domain controllers running Windows Server 2012 to Windows Server 2016 is the best choice for implementing PAM.

You Are the System Administrator at an Organization