How would you use JEA to reduce privilege in an operations team?
Documentation: Microsoft Learn
Use JEA endpoints and role capabilities to limit administrative commands. Choose the execution identity, audit sessions, and test denied operations.
Interview · Question 23 of 34
Answer before reveal
Your draft
Write the answer you would give in an interview. The model answer stays hidden until you have drafted at least a short response.
A strong answer
Define constrained endpoints around approved tasks, expose only required commands and parameters, map operators to role capabilities, choose the endpoint identity deliberately, audit sessions and test that disallowed operations fail.
Show it concretely
1PS> Get-PSSessionConfiguration
Expect this follow-up
How would you stop an allowed command from becoming a path to an unintended helper executable?
