VMware vSphere with Kubernetes Specialist — Question 38

Which two steps must be fulfilled to enable Kerberos Constrained Delegation on the SEGv2? (Choose two.)

Answer options

• A. Upload the Offline Root CA Certificate to the SEG v2.
• B. Verify that the SEG Server is able to connect to the domain controller through Port 80.
• C. Join the SEGv2 to the Active Directory.
• D. Enable Require Client Certificate.
• E. Enter Target SPN in HTTP/{exchangeName} format.

Correct answer: D, E

Explanation

The correct answers, D and E, are essential for enabling Kerberos Constrained Delegation because requiring a client certificate ensures proper authentication, and specifying the Target SPN is necessary for delegation to the appropriate service. Options A, B, and C are not directly related to the configuration of Kerberos Constrained Delegation in this context, making them incorrect choices.