AZ-802 · Hybrid server management · Hybrid server management | Configure remote management for Windows Server instances in a hybrid environment

Practice question 61 of 506 · hard

A remoting design must open a second WinRM session from B to C. An engineer proposes resource-based Kerberos constrained delegation as a universal fix. How should you assess the proposal?

Choose the single best answer.

A.Accept it because all Kerberos delegation methods support all services
B.Set TrustedHosts to an asterisk to grant C’s endpoint permissions
C.Replace C’s DNS zone with an Azure private zone to enable delegation
D.Reject the universal assumption: this method is not documented to support the second WinRM hop

Show the answer and explanation

✓ Correct answer

Reject the universal assumption: this method is not documented to support the second WinRM hop

The second-hop documentation explicitly identifies the WinRM limitation of resource-based constrained delegation. Delegation support is service-specific. DNS zone type does not remove that protocol limitation, and TrustedHosts does not grant endpoint authorization or automatically delegate credentials.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.