What should you do?

You administer Windows 10 Enterprise laptop and desktop computers. Your company uses Active Directory Domain Services (AD DS) and Active Directory Certificate Services (AD CS).

Your company decides that access to the company network for all users must be controlled by two-factor authentication.

You need to configure the computers to meet this requirement.

What should you do?
A . Install smart card readers on all computers. Issue smart cards to all users.
B . Enable the Password must meet complexity requirements policy setting. Instruct users to logon by typing their user principal name (UPN) and their strong password.
C . Create an Internet Protocol security (IPsec) policy on each Windows 10 Enterprise computer to encrypt traffic to and from the domain controller
D . Issue photo identification to all users. Instruct all users to create and use a picture password.

View Answer

Answer: A

Explanation:

Smart cards contain a microcomputer and a small amount of memory, and they provide secure, tamper-proof storage for private keys and X.509 security certificates.

A smart card is a form of two-factor authentication that requires the user to have a smart card and know the PIN to gain access to network resources.