AZ-802 Secure Windows Server Infrastructure Practice Question
Your organization implements Just Enough Administration (JEA) to manage Windows Servers. A junior administrator needs to restart the Print Spooler service on several print servers but should not have full administrative rights. You need to identify the specific file that defines which cmdlets and external commands the junior administrator can execute. Which file should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The Role Capability file (.psrc)
The Role Capability file defines exactly which cmdlets, functions, and external commands a user is allowed to run when connecting to a JEA endpoint. By restricting access to only the necessary tools for a specific task, you minimize the potential for lateral movement or accidental misconfiguration. This principle of least privilege is a cornerstone of securing administrative access in modern Windows Server environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The Session Configuration file (.pssc)
Why it's wrong here
The Session Configuration file is used to define the environment of the JEA endpoint, such as the identity the session runs under and which role capabilities are assigned. While it references role capabilities, it does not contain the granular list of permitted cmdlets or functions that the administrator requires for task execution.
- ✓
The Role Capability file (.psrc)
Why this is correct
The Role Capability file is a PowerShell data file that specifies what a user can do once they connect to a session. It explicitly lists cmdlets, functions, and provider capabilities permitted for the role. This allows administrators to grant specific permissions, like restarting a service, without granting full local administrative permissions on the server.
- ✗
The PowerShell Profile file (.ps1)
Why it's wrong here
PowerShell profiles are scripts that run when a PowerShell session starts to customize the environment for the user. They are not used for security enforcement or defining JEA restrictions. Relying on profiles for security is ineffective because users can often bypass them or modify their own local profile settings during standard operation.
- ✗
The Module Manifest file (.psd1)
Why it's wrong here
Module manifests are used to describe the contents of a PowerShell module, including its version, dependencies, and exported members. While they help organize code, they do not provide the security constraints required by Just Enough Administration to restrict a user's command execution context within a specific hardened remote management session.
About these practice questions
Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.