StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Hybrid server management · Hybrid server management | Configure remote management for Windows Server instances in a hybrid environment

Practice question 59 of 506 · medium

Help-desk staff must restart only the Spooler service without acquiring unrestricted local administrator access. What is the most appropriate design?

Choose the single best answer.

  1. A.A default unrestricted remote endpoint with only the service startup type changed
  2. B.A JEA role exposing unrestricted PowerShell script execution
  3. C.A permanent local Administrators membership for the help-desk group
  4. D.A JEA endpoint exposing a constrained restart operation for Spooler and mapping the help-desk group to that role
Show the answer and explanation

✓ Correct answer

  • A JEA endpoint exposing a constrained restart operation for Spooler and mapping the help-desk group to that role

The constrained endpoint grants the requested operation without broad standing privilege. Unrestricted script execution or local Administrators defeats the boundary. Changing startup type does not restrict what operators can execute through an unrestricted endpoint.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.