StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 374 of 506 · medium

A service's DNS alias works with NTLM but fails when the application requires Kerberos. Which investigation best targets the name-dependent cause?

Choose the single best answer.

  1. A.Check the alias's service SPN registration, uniqueness, and owning account
  2. B.Change the site-link interval only
  3. C.Grant the user backup privileges on the service host
  4. D.Increase the FGPP minimum password length only
Show the answer and explanation

✓ Correct answer

  • Check the alias's service SPN registration, uniqueness, and owning account

Kerberos requires a correct unique SPN tied to the service identity, so an alias can expose missing registration. Password length, replication scheduling, and backup privilege do not repair service-name ticket mapping.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.