Exam 70-740 topic 1 question 151 discussion

Actual exam question from Microsoft's 70-740

Question #: 151
Topic #: 1

Your network contains an Active Directory domain.
The domain contains two Hyper-V hosts.
You plan to perform live migrations between the hosts.
You need to ensure that the live migration traffic is authenticated by using Kerberos.
What should you do first?

A. From Server Manager, install the Host Guardian Service server role on a domain controller.
B. From Active Directory Users and Computers, add the computer accounts for both servers to the Cryptographic Operators group.
C. From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both servers.
D. From Server Manager, install the Host Guardian Service server role on both servers.

Show Suggested Answer

Suggested Answer: C 🗳️
If you have decided to use Kerberos to authenticate live migration traffic, configure constrained delegation before you proceed to the rest of the steps.

by RockClimber at June 12, 2019, 6:27 p.m.

Comments

Submit Cancel

Pitch09

4 years, 8 months ago

I got this on exam 10-20-2020

upvoted 2 times

...

ITGEEK

5 years, 9 months ago

C is correct

upvoted 2 times

...

RockClimber

6 years ago

C, modifying delegation is correct https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/set-up-hosts-for-live-migration-without-failover-clustering#consider-options-for-authentication-and-networking

upvoted 3 times

...