What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
Answer: 5 minutes
Windows Server 2012
- Name two benefits to using Managed Service Accounts (MSAs).
- Health policies are connected to what two other policies?
- Health policies are in pairs. What are the members of the pair?
- Which two components must a NAP client have enabled in order to use NAP?
- Identify two remediation server types.
- What is the name by which a client uniquely identifies an instance of a service?
- What is the default authentication protocol for contemporary domain computers?
- By default, which service accounts will the Windows PowerShell cmdlets manage?
- What type of account is an account under which an operating system, process, or service runs?
- Which tool can you use to add SPNs to an account?
- Which three components make up a service principal name (SPN)?
- What type of protocol is Kerberos?
- What is the default authentication protocol for non-domain computers?
- Why is monitoring system health so important?
- What is the purpose of the System Health Agent (SHA)?
- When enabling NAP for DHCP scopes, how should you roll out the service?
- Which computers are not affected by VPN enforcement?
- Why is there a No Encryption option for network connections?
- What is the strongest type of encryption used with NPS?
- If a remote connection attempt does not match any configured constraints, what does the Remote Access server do to the connection?
- When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any _______________ that have been configured for the policy.
- To which type of file do you export an NPS configuration?
- What command-line utility is used to import and export NPS templates?
- What is the last setting in the Routing and Remote Access IP settings?