Exam AZ-801 topic 3 question 14 discussion

You can replicate over HTTP or encrypted HTTPS. Select Use Kerberos (HTTP) or Use certificate-based Authentication (HTTPS). By default HTTP 80 and HTTPS 443 are enabled as firewall exceptions on the replica Hyper-V server. If you change the default port settings you'll need to also change the firewall exception. If you're replicating over HTTPS, you'll need to select a certificate and you should have certificate authentication set up. Kerberos use its own encryption when transmitting through HTTP.

D. From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTP Listener (TCP-In) rule.

Hyper-V Replica Broker is a role that coordinates the replication and failover operations on failover clusters. When you want to use Hyper-V Replica with a failover cluster, you need to configure the Hyper-V Replica Broker role on the cluster, and then add the primary servers (in this case, the servers in Cluster1) to the Broker configuration on Server1. Options B, C, and D are not correct because they are not necessary for setting up Hyper-V Replica with Kerberos authentication on the default port. Enabling live migrations (Option B) is not related to Hyper-V Replica. The Hyper-V Replica HTTPS Listener (Option C) is used for Replica over HTTPS, not Kerberos. The Hyper-V Replica HTTP Listener (Option D) is also used for Replica over HTTP, not Kerberos. Kerberos authentication for Hyper-V Replica does not require any specific firewall rules to be enabled. It uses the standard SMB (Server Message Block) ports (TCP 445), which should already be open on a Hyper-V host.

correct answer

https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica To enable HTTP (Kerberos) authentication, right-click Hyper-V Replica HTTP Listener (TCP-In) > Enable Rule. Answer is D

The given answer is correct. You can replicate over HTTP or encrypted HTTPS. Select Use Kerberos (HTTP) or Use certificate-based Authentication (HTTPS).

This question is vague, there are other steps that need to be done, and this is not the first step, but because the requirement is "with Kerberos authentication on the default port" that means they want you to answer D

Correct Answer Kerberos Use HTTP "You can replicate over HTTP or encrypted HTTPS. Select Use Kerberos (HTTP)"