Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. You implement Just Enough Administration (JEA) on Server1. You need to perform…

Question

Options

• APowerShell only
• BRemote Server Administration Tools (RSAT) only
• CPowerShell or Remote Desktop only
• DPowerShell or Remote Server Administration Tools (RSAT) only
• ERemote Server Administration Tools (RSAT) or Remote Desktop only
• FPowerShell, Remote Server Administration Tools (RSAT), or Remote Desktop

• A
  91% (20)
• B
  5% (1)
• F
  5% (1)

Explanation

Just Enough Administration (JEA) is built entirely on top of PowerShell remoting (WinRM). JEA creates constrained PowerShell session configurations (registered as PowerShell endpoints) that restrict what commands a user can run and what identity they run as. The only way to connect to and interact with a JEA endpoint is through PowerShell - specifically using Enter-PSSession or Invoke-Command targeting the JEA session configuration. RSAT tools communicate with servers using their own protocols (RPC, DCOM, etc.) and do not route through JEA endpoints, so they bypass JEA constraints entirely. Remote Desktop gives direct shell access to the server as the logged-in user, completely bypassing JEA. Therefore, PowerShell is the only tool that uses and is constrained by JEA.

No community discussion yet for this question.