Securing AD DS Practice Tests: 152 Questions Explained

Active Directory is the first thing an attacker goes after. These practice tests check whether you know how to defend it: securing domain controllers and privileged accounts, hardening authentication, auditing what happens, and recognising the attacks that target AD DS.

You get 4 practice tests with 152 questions in total (38, 38, 38, 38). Every question was checked twice before release: once by the author against the official documentation, and once by an independent reviewer who answered it blind - any disagreement was settled with a source.

What makes the explanations useful

Each answer tells you why the right option is right and why each wrong option is wrong. The wrong options are real features, commands and settings that are easy to pick by mistake - that is where most of the learning is.

How the tests are built

• Practice Test 1: Securing Domain Controllers and Privileged Access: tiered administration, privileged access workstations, protected groups, Protected Users, JEA, Windows LAPS and delegation.
• Practice Test 2: Authentication and Account Security: Kerberos and NTLM, password and lockout policies, fine-grained password policies, gMSAs, authentication policies and silos.
• Practice Test 3: Auditing, Attacks and Recovery: advanced audit policy, event logs, Defender for Identity, pass-the-hash, Kerberoasting, golden tickets, DCSync, baselines, backup and recovery.
• Practice Test 4: Full Mock Exam: a mixed exam across all three areas - take it last, in one sitting.

Questions use single-answer and multiple-answer formats; the number of answers to pick is always stated. Suggested time: 60 minutes per test.

Versions: Windows Server 2022 and Windows Server 2025 Active Directory Domain Services security (Kerberos, NTLM, Windows LAPS, gMSA, Protected Users, authentication policies and silos, advanced audit policy, Microsoft Defender for Identity), as of October 2026.

Please note: these are original practice questions written by an instructor. This course is not affiliated with or endorsed by Microsoft; Active Directory and Windows Server are Microsoft trademarks.