Protected Users Group Quiz

What you'll be asked

1. Which security group in Active Directory is designed to provide non-configurable protection for highly privileged accounts against credential theft attacks?
2. When a user is added to the Protected Users group, which authentication protocol is automatically disabled for that account?
3. A member of the Protected Users group attempts to authenticate using a DES or RC4 encryption type for Kerberos. What is the expected behavior?
4. What is the consequence of adding an account to the Protected Users group regarding Kerberos TGT (Ticket Granting Ticket) lifetime?
5. Why might a service account fail to authenticate after being added to the Protected Users group?

Answers and explanations come after you submit.