exam questions

Exam AZ-800 All Questions

View all questions & answers for the AZ-800 exam

Exam AZ-800 topic 2 question 31 discussion

Actual exam question from Microsoft's AZ-800
Question #: 31
Topic #: 2
[All AZ-800 Questions]

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.



User1 is a member of the Protected Users security group.

User1 performs the following actions:

• From Server1, establishes a remote PowerShell session on Server2
• From the PowerShell session on Server2, attempts to access a resource on Backup1

The request to access the resource on Backup1 is denied.

You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort.

What should you configure?

  • A. Kerberos delegation (unconstrained)
  • B. CredSSP
  • C. PSSessionConfiguration by using RunAs
  • D. resource-based Kerberos constrained delegation
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Krayzr
1 month ago
Selected Answer: D
Resource-based Kerberos constrained delegation Resource-based Kerberos constrained delegation allows you to specify which services can delegate to which resources, providing a more secure and controlled delegation compared to unconstrained delegation. This setup ensures that User1 can access the necessary resources without granting excessive permissions
upvoted 1 times
...
Ksk08
2 months, 1 week ago
Answer: D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago