Practice question 46 of 180 · hard
Hybrid users can mount Azure Files profiles using Microsoft Entra Kerberos from eligible Entra-joined hosts without host-to-DC access. A remote administrator now needs to configure those users' NTFS ACLs but lacks AD connectivity. Which dependency remains relevant?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- AD connectivity for the documented hybrid-user ACL administration
The normal Entra Kerberos access path can avoid DC line of sight while hybrid ACL administration still needs it. Provide the administrator's required directory path. Option explanations: A. AD connectivity for the documented hybrid-user ACL administration: Normal cloud Kerberos profile access and hybrid ACL administration have different directory dependencies. B. Replacing all user ACLs with anonymous full access: Removing authorization is not a supported solution to missing directory connectivity. C. Disabling the storage account's identity source permanently: That would disrupt identity-based access rather than enable the intended administration. D. Public inbound RDP to every session host: Exposing administrative RDP does not establish the missing directory access. Sources: Store FSLogix profile containers on Azure Files using Microsoft Entra ID — https://learn.microsoft.com/en-us/fslogix/how-to-configure-profile-container-entra-id-hybrid; Enable Microsoft Entra Kerberos authentication for hybrid and cloud-only identities on Azure Files — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.