Practice question 48 of 180 · hard
A hardening baseline disabled two Windows services on otherwise eligible Entra Kerberos FSLogix hosts. DNS, share roles and ACLs pass their checks. Which two services must be running for the documented ticket flow?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)
- IP Helper (iphlpsvc)
Restore the documented services. Their names should not be confused with optional administrative or printing services; WPAD hardening can be handled separately. Option explanations: A. Print Spooler: It is not one of these documented Entra Kerberos ticket-flow prerequisites. B. Remote Registry: It is not one of the two required services identified for this flow. C. WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc): It performs functions including KDC Proxy requests; disabling WPAD separately does not justify disabling this service. D. IP Helper (iphlpsvc): The Entra Kerberos prerequisites explicitly require IP Helper in the running state. Sources: Enable Microsoft Entra Kerberos authentication for hybrid and cloud-only identities on Azure Files — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.