You network contains an Active Directory forest named contoso.com.
All domain controllers run Windows Server 2016 Member servers run either Windows Server 2012 R2 or
Windows Server 2016.
Client computers run either Windows 8.1 or Windows 10.
You need to ensure that when users access files in shared folders on the network, the files are encrypted when
they are transferred over the network.
Solution: You enable SMB encryption on all the computers in domain. Does this meet the goal?
A.
Yes
B.
No
Explanation:
SMB Encryption could be enabled on a per-computer wide basis, after you have enabled SMB encryption on a
server-level basis, you could not disable encryption
for any specific shared folder.
To enable Global level encryption on the server:
Set-SmbServerConfiguration -EncryptData 1