You want to protect cached domain credentials on a Windows Server from Pass-the-Hash and ticket-extraction attacks using virtualization-based security (VBS). Which Windows feature should you enable?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Windows Defender Credential Guard

Windows Defender Credential Guard uses virtualization-based security to isolate secrets (like NTLM password hashes and Kerberos Ticket Granting Tickets) in a secure hypervisor-prot...

📋Part of Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801) · Azure Certification Practice
Real Exam ScenarioWindows Server Security

You want to protect cached domain credentials on a Windows Server from Pass-the-Hash and ticket-extraction attacks using virtualization-based security (VBS). Which Windows feature should you enable?

✓ Correct Answer & ExplanationWindows Server Security

Correct Answer

Windows Defender Credential Guard

Why This Answer Is Correct

Windows Defender Credential Guard uses virtualization-based security to isolate secrets (like NTLM password hashes and Kerberos Ticket Granting Tickets) in a secure hypervisor-protected enclave, preventing theft from the OS kernel.

📚 What This Question Tests

This question evaluates your knowledge of Windows Server Security — a core concept tested in Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801). Understanding Windows Server Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801) Questions →Browse All Azure Exams →

More Windows Server Security Practice Questions

You want to allow junior administrators to restart the DNS Server service on a Windows Server using PowerShell Remoting. However, you do NOT want to give them local Administrator rights on the server. Which feature should you configure?

← Back to Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801) Full Practice Hub