Securing Windows Server 2016 — Question 13

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server
2016.
Server1 is configured as a domain controller.
You configure Server1 as a Just Enough Administration (JEA) endpoint. You configure the required JEA rights for a user named User1.
You need to tell User1 how to manage Active Directory objects from Server2.
What should you tell User1 to do first on Server2?

Answer options

• A. From a command prompt, runntdsutil.exe.
• B. From Windows PowerShell, run the Import-Module cmdlet.
• C. From Windows PowerShell, run the Enter-PSSession cmdlet.
• D. Install the management consoles for Active Directory, and then launch Active Directory Users and Computers.

Correct answer: C

Explanation

The correct answer is C, as User1 must first establish a PowerShell session with the JEA endpoint configured on Server1 to manage Active Directory objects remotely. The other options do not initiate this necessary session; running ntdsutil.exe or installing management consoles does not facilitate the required remote management capabilities through JEA.