Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member
servers.
Solution: You configure Kerberos constrained delegation on the computer account of each member server.
Does this meet the goal?
A.
Yes
B.
No
configure Kerberos constrained delegation once per FOREST, not domains or servers
3
1
Completely unrelated. I’d say the correct course of action here would be to create a KDS Root Key. I’m guessing we’ll come across that one later. In this case, however, the answer is No.
9
0