nerdexam
Microsoft

AZ-800 · Question #249

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table. User1 is a member of the Prot

Sign in or unlock AZ-800 to reveal the answer and full explanation for question #249. The question stem and answer options stay visible for context.

Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments

Question

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table. User1 is a member of the Protected Users security group. User1 performs the following actions:

  • From Server1, establishes a remote PowerShell session on Server2
  • From the PowerShell session on Server2, attempts to access a resource

on Backup1 The request to access the resource on Backup1 is denied. You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort. What should you configure?

Options

  • AKerberos delegation (unconstrained)
  • BCredSSP
  • CPSSessionConfiguration by using RunAs
  • Dresource-based Kerberos constrained delegation

Unlock AZ-800 to see the answer

You've previewed enough free AZ-800 questions. Unlock AZ-800 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Kerberos Delegation#Active Directory Security#Protected Users Group#PowerShell Remoting
Full AZ-800 Practice