Configure Remote Management for Windows Servers in a Hybrid Environment AZ-800 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which file is used to define the role capabilities for a Just Enough Administration (JEA) endpoint?

   • AA .json file
   • BA .ps1 file
   • CA .xml file
   • DA .psrc file
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   An administrator needs to run a PowerShell script that queries Active Directory from a management server. The script must run under the administrator's identity, but the administrator should not be able to use the PowerShell console interactively on the management server. The environment is domain-joined and uses Kerberos. What should you do to meet the requirement?

   • AAdd the administrator to the local Administrators group on the management server and use PowerShell remoting.
   • BCreate a JEA endpoint on the management server that includes the Active Directory cmdlets and assign the administrator to it.
   • CEnable CredSSP on the management server and use it to delegate credentials to the domain controller.
   • DUse Group Policy to restrict the administrator's PowerShell console access and allow only the script to run.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   You are troubleshooting a PowerShell remoting issue. A user can connect to a file server via PowerShell remoting, but when they try to copy a file from the file server to a network share on another server, the operation fails with an access denied error. The user is a domain administrator. You have already configured constrained delegation for the file server's computer account to the network share server. What is the most likely reason for the failure?

   • AThe user's account is not allowed to delegate credentials
   • BThe network share server is not in the same domain as the file server
   • CThe file server is not trusted for delegation to the network share server
   • DThe user authenticated using NTLM, and constrained delegation without protocol transition does not work with NTLM
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A DevOps team wants to use SSH to manage Windows Server 2022 VMs from their Linux CI/CD pipeline. They need to ensure that the SSH service starts automatically and that only key-based authentication is allowed. What should you do?

   • AEnable WinRM and use the ssh command from the pipeline to connect.
   • BInstall OpenSSH Server, set the service startup type to Automatic, and configure sshd_config to disable password authentication.
   • CInstall the SSH Server feature and set the service to Manual startup.
   • DInstall OpenSSH Server and leave the default configuration, which allows password authentication.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a Windows Server 2019 server that is not domain-joined. They want to use Windows Admin Center to manage it from a separate management workstation. The workstation is not domain-joined either. What is the simplest way to authenticate to the server from Windows Admin Center?

   • AJoin both machines to an Active Directory domain and use domain credentials.
   • BUse the same local administrator credentials on both the management workstation and the target server.
   • CEnable CredSSP on both machines to allow delegation of local credentials.
   • DUse a certificate-based authentication method for WAC.
   Reveal Solution Discussion Select an answer first