Practice question 47 of 180 · medium
A supported, updated public-cloud host uses Azure Files Entra Kerberos for cloud-only users. Cloud-only group membership is needed for ACLs, but the storage application has not enabled cloud group SIDs. Which manifest tag is required?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- kdc_enable_cloud_group_sids
Apply the documented cloud-group tag in the storage Entra application. Updated host prerequisites, admin consent and permissions must also be satisfied. Option explanations: A. WindowsVirtualDesktop: The firewall FQDN tag is unrelated to Kerberos application group SIDs. B. kdc_enable_cloud_group_sids: This tag enables the documented cloud-only group SID behavior and is mandatory for that scenario. C. DeleteLocalProfileWhenVHDShouldApply: This FSLogix setting concerns local profile removal, not Entra application SIDs. D. SharedComputerLicensing: This Office activation property does not configure Azure Files tickets. Sources: Enable Microsoft Entra Kerberos authentication for hybrid and cloud-only identities on Azure Files — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.