Question
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
| Name | Type |
| --- | --- |
| DC1 | Domain controller |
| Server1 | Member server |
| Server2 | Member server |
The domain contains the users shown in the following table.
| Name | Member of |
| --- | --- |
| User1 | Contoso\Administrators |
| User2 | Contoso\Remote Management Users |
| User3 | Server2\Power Users |
On Server2, you run the Enable-PSRemoting cmdlet.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation
Statement 1 (Yes): Enable-PSRemoting on Server2 starts WinRM, creates the listener, opens the firewall rules and registers the default Microsoft.PowerShell endpoint. By default, that endpoint lets administrators and members of Remote Management Users connect. User1 is treated as an administrator, so User1 can connect to Server2 from Server1.
Statement 2 (Yes): PowerShell remoting is on by default on Windows Server 2012 and later, including DC1. On a domain controller, the domain's built-in Remote Management Users group is the group the default endpoint authorizes. User2 is a member, so User2 can connect from Server2 to DC1.
Statement 3 (No): User3 is only a member of Server2's local Power Users group. That group is not on the default endpoint's access list, which allows only Administrators and Remote Management Users, so the connection is denied.
