StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 358 of 506 · easy

A privileged user must never have their context delegated to another service. Which account option directly supports that?

Choose the single best answer.

  1. A.Account is sensitive and cannot be delegated
  2. B.Store password using reversible encryption
  3. C.Do not require Kerberos preauthentication
  4. D.Use Kerberos DES encryption types
Show the answer and explanation

✓ Correct answer

  • Account is sensitive and cannot be delegated

The sensitive/nondelegable option directly restricts delegation. Removing preauthentication, using DES, or reversible storage weakens other authentication protections and does not express this nondelegation requirement.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.