StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Storage and file services · Storage and file services | Configure and manage Windows Server file shares

Practice question 256 of 506 · hard

After NTLM is blocked, SMB access by a new DNS alias fails but the server real name works. What should be investigated?

Choose the single best answer.

  1. A.Only requiring SMB signing on both ends
  2. B.Only increasing the share's session timeout
  3. C.The alias DNS mapping and appropriate service SPN
  4. D.Only loosening the permitted SMB dialect range
Show the answer and explanation

✓ Correct answer

  • The alias DNS mapping and appropriate service SPN

Kerberos service tickets depend on correct name/SPN identity, explaining a new-alias failure after NTLM blocking. Dialect range, signing, and session timeout do not create the missing Kerberos service identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.