CompTIA Server+ SK0-005 Practice Question
A change freeze left several Windows Server 2016 application servers unpatched since May 2022. After domain controllers were updated with the April 11 2023 cumulative security patch that moves the Netlogon fix for CVE-2022-38023 into Enforcement mode, users can no longer authenticate to the application. On every domain controller the System log records NETLOGON Event ID 5838 that states "The Netlogon service encountered a client using RPC signing instead of RPC sealing."
Which remediation should you perform first to restore service without weakening the new security baseline?
Reset the machine-account passwords on the application servers by running netdom reset.
Disable SMB signing on the application servers via Group Policy to reduce authentication overhead.
Change the RequireSeal registry value on all domain controllers from 2 (Enforcement) to 1 (Compatibility).
Install the latest cumulative Windows updates on the application servers so they can negotiate RPC sealing.