Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

Which authentication mechanism facilitates implementation of Storage Replica by using Windows Admin Center?

1. Kerberos

2. CredSSP

3. NTLM

4. LDAP

The correct answer is: CredSSP

The authentication mechanism that facilitates the implementation of Storage Replica by using Windows Admin Center is CredSSP. CredSSP, which stands for Credential Security Support Provider, is an authentication protocol that enables secure communication between clients and servers by allowing the use of and delegation of user credentials. In the context of Windows Admin Center and Storage Replica, CredSSP is particularly advantageous because it supports multi-hop authentication scenarios. This is essential when transferring data and configuring storage replication between servers that might not share a direct trust relationship. The way CredSSP works allows for the proper transmission of credentials from the client to the remote server hosting the Storage Replica, ensuring that the necessary administrative tasks can be performed seamlessly and securely. While Kerberos is a widely used authentication method in Active Directory environments for securing communications, it requires a configured domain environment and may not always be suitable for multi-hop scenarios without specific configurations. NTLM, which is a legacy authentication protocol, is generally less secure and has limitations compared to newer protocols. LDAP is more about directory access and doesn't focus on authentication in the way that is required for the nuanced communication needs associated with Storage Replica and Windows Admin Center. Thus, CredSSP is specifically designed to bridge these gaps and is the mechanism best suited for