Courseiva
Secure Windows Server InfrastructuremediumMultiple ChoiceObjective-mapped

AZ-802 Secure Windows Server Infrastructure Practice Question

Your organization implements Just Enough Administration (JEA) to manage Windows Servers. A junior administrator needs to restart the Print Spooler service on several print servers but should not have full administrative rights. You need to identify the specific file that defines which cmdlets and external commands the junior administrator can execute. Which file should you configure?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The Role Capability file (.psrc)

The Role Capability file defines exactly which cmdlets, functions, and external commands a user is allowed to run when connecting to a JEA endpoint. By restricting access to only the necessary tools for a specific task, you minimize the potential for lateral movement or accidental misconfiguration. This principle of least privilege is a cornerstone of securing administrative access in modern Windows Server environments.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The Session Configuration file (.pssc)

    Why it's wrong here

    The Session Configuration file is used to define the environment of the JEA endpoint, such as the identity the session runs under and which role capabilities are assigned. While it references role capabilities, it does not contain the granular list of permitted cmdlets or functions that the administrator requires for task execution.

  • The Role Capability file (.psrc)

    Why this is correct

    The Role Capability file is a PowerShell data file that specifies what a user can do once they connect to a session. It explicitly lists cmdlets, functions, and provider capabilities permitted for the role. This allows administrators to grant specific permissions, like restarting a service, without granting full local administrative permissions on the server.

  • The PowerShell Profile file (.ps1)

    Why it's wrong here

    PowerShell profiles are scripts that run when a PowerShell session starts to customize the environment for the user. They are not used for security enforcement or defining JEA restrictions. Relying on profiles for security is ineffective because users can often bypass them or modify their own local profile settings during standard operation.

  • The Module Manifest file (.psd1)

    Why it's wrong here

    Module manifests are used to describe the contents of a PowerShell module, including its version, dependencies, and exported members. While they help organize code, they do not provide the security constraints required by Just Enough Administration to restrict a user's command execution context within a specific hardened remote management session.

About these practice questions

Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Microsoft exam blueprint

This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.