StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Configure and manage multi-site, multi-domain, and multi-forest environments

Practice question 22 of 506 · medium

A forest trust uses selective authentication. Employees have a group on a file ACL but still cannot authenticate to the target server. What additional permission should be examined?

Choose the single best answer.

  1. A.Allowed to authenticate on the target computer
  2. B.List folder permission on the share only
  3. C.Password-reset delegation on the users' OU
  4. D.Read permission on the target computer object only
Show the answer and explanation

✓ Correct answer

  • Allowed to authenticate on the target computer

Selective authentication adds Allowed to authenticate on the target computer. Reading its object or listing a share does not satisfy that authentication gate. User password-reset delegation is a directory administration right rather than target-computer authentication authorization.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.