StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Monitoring and troubleshooting · Monitoring and troubleshooting | Troubleshoot Active Directory

Practice question 462 of 506 · medium

For a Kerberos second-hop failure, select two useful checks.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Treat ticket purging as a permanent fix for duplicate SPNs
  2. B.The backend service SPN and actual service identity
  3. C.Assume first-hop success grants unrestricted delegation
  4. D.The supported delegation configuration and account restrictions
  5. E.Ignore clock skew because DNS resolves
Show the answer and explanation

✓ Correct answers

  • The backend service SPN and actual service identity
  • The supported delegation configuration and account restrictions

Service identity and constrained delegation/account policy govern backend access. First-hop success is insufficient; purging does not correct directory registrations; Kerberos time requirements remain despite DNS success.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.