StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Hybrid server management · Hybrid server management | Configure remote management for Windows Server instances in a hybrid environment

Practice question 60 of 506 · hard

A JEA design allows operators to call a role function that writes to a domain file share. A dedicated gMSA will execute the function. Which two actions are required? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Configure the endpoint to use the intended gMSA run-as identity
  2. B.Expose arbitrary external executables so the function can bypass restrictions
  3. C.Grant that gMSA the required share and filesystem access
  4. D.Grant every connecting operator Domain Admins membership
  5. E.Assume all gMSAs already have access to every domain share
Show the answer and explanation

✓ Correct answers

  • Configure the endpoint to use the intended gMSA run-as identity
  • Grant that gMSA the required share and filesystem access

Configure the run-as identity and authorize that identity at the resource. gMSA status does not confer universal share permissions. Domain Admins membership is unnecessary and excessive for the operators. Unrestricted external commands weaken JEA rather than satisfying the defined resource rights.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.