StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 367 of 506 · medium

A service must accept delegated user access only from approved front-end servers using RBCD. Where is that authorization configured?

Choose the single best answer.

  1. A.Only by assigning an SPN without resource-side authorization
  2. B.Only on the user's nondelegation flag
  3. C.Only on the front-end object's traditional constrained-delegation target list
  4. D.On the resource-side object identifying allowed delegating principals
Show the answer and explanation

✓ Correct answer

  • On the resource-side object identifying allowed delegating principals

RBCD is authorized on the resource object. A traditional source-side constrained-delegation list is a different model; a user nondelegation flag restricts rather than grants delegation. An SPN identifies a service but does not alone authorize RBCD principals.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.