Securing Windows Server 2016 — Question 123

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server5 that runs Windows Server 2016.
You need to configure Server5 as a Just Enough Administrator (JEA) endpoint.
Which two actions should you perform? Each correct answer presents part of the solution.

Answer options

• A. Generate a random Globally Unique Identifier (GUID).
• B. Create and export a Windows PowerShell session.
• C. Create and register a session configuration file.
• D. Deploy Microsoft Identity Manager (MIM) 2016.
• E. Create a maintenance Role Capability file.

Correct answer: C, E

Explanation

The correct actions to configure a JEA endpoint are to create and register a session configuration file (C) and to create a maintenance Role Capability file (E). These elements define the JEA endpoint and specify what administrative tasks can be performed. The other options, while relevant to other configurations or systems, do not directly contribute to setting up a JEA endpoint.