- 5 views
Exam
Answer confirmed
Question
Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.
User1 is a member of the Protected Users security group.
User1 performs the following actions:
• From Server1, establishes a remote PowerShell session on Server2
• From the PowerShell session on Server2, attempts to access a resource on Backup1
The request to access the resource on Backup1 is denied.
You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort.
What should you configure?
Proposed answer
- A. Kerberos delegation (unconstrained)
- B. CredSSP
- C. PSSessionConfiguration by using RunAs
- D. resource-based Kerberos constrained delegation
Correct answer
- D. resource-based Kerberos constrained delegation
Krayzr
2 days, 14 hours ago
Selected Answer: D
Resource-based Kerberos constrained delegation Resource-based Kerberos constrained delegation allows you to specify which services can delegate to which resources, providing a more secure and controlled delegation compared to unconstrained delegation. This setup ensures that User1 can access the necessary resources without granting excessive permissions
upvoted 1 times
Ksk08
1 month, 1 week ago
Answer: D
upvoted 1 times