Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 70-742 topic 1 question 83 discussion

Actual exam question from Microsoft's 70-742
Question #: 83
Topic #: 1
[All 70-742 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: You configure Kerberos constrained delegation on the computer account of each member server.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
coleman
Highly Voted 4 years, 5 months ago
right.the answer is NO. the solution should be : From Windows PowerShell on a domain controller, you run the Add-KdsRootKey cmdlet.
upvoted 11 times
...
Charchar
Highly Voted 4 years, 6 months ago
I think the answer is correct. Kerberos is not a pre-requisite of gMSA, but creating a KDS root key is
upvoted 7 times
...
mikl
Most Recent 3 years, 4 months ago
Add-KdsRootKey is needed as well. So correct answer is B. No
upvoted 2 times
...
dan
4 years, 7 months ago
based on the link: https://corrick.io/blog/kerberos-constrained-delegation-with-group-managed-service-accounts/ the answer would be YES - if someone can find something more definitive please do.
upvoted 1 times
GenjamBhai
3 years, 8 months ago
B is ok. Need to run Add-KdsRootKey on DC
upvoted 5 times
...
...
TMW
4 years, 8 months ago
I believe this is correct: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...