You have a Microsoft 365 subscription and an on-premises Active Directory domain named contoso.com. All client computers run Windows 10 Enterprise and are joined to the domain.
You need to enable Windows Defender Credential Guard on all the computers.
What should you do?

A. From the Microsoft 365 Defender, configure the DKIM signatures for the domain.

B. From a domain controller, create a Group Policy object (GPO) that enables the Restrict delegation of credentials to remote servers setting.

C. From the Security & Compliance admin center, create a device security policy.

D. From a domain controller, create a Group Policy object (GPO) that enabled the Turn On Virtualization Based Security setting.








 

Suggested Answer: D

Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

This question is in MS-101 Exam
For getting Microsoft 365 Administrator Expert Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.