When Maximo issues the cmdlet 'Set-ADComputer', what conclusions can be drawn?

• A. He is configuring two-way authentication.
• B. The command involves managed service accounts.
• C. Resource-based constrained delegation is being configured.
• D. Active Directory features are not installed on the DC.

Answer: (C)

The command 'Set-ADComputer' is specifically used in the context of managing Active Directory computer objects. It allows administrators to modify various properties of computer accounts in Active Directory. When the cmdlet is utilized, it often includes setting up configurations such as resource-based constrained delegation. This type of delegation allows specific service accounts to delegate their credentials to resources, enhancing security and control over authentication processes.

In environments that utilize resource-based constrained delegation, the 'Set-ADComputer' cmdlet can be employed to enable this feature on the necessary computer accounts. Thus, the conclusion that resource-based constrained delegation is being configured aligns with the typical usage and purpose of the cmdlet.

The other options do not directly relate to what 'Set-ADComputer' accomplishes. Configuring two-way authentication pertains to broader security protocols rather than specific computer account management. Managed service accounts relate to a separate functionality in Windows that is not inherently configured by this cmdlet. Lastly, the assertion regarding Active Directory features not being installed on the domain controller (DC) contradicts the context in which 'Set-ADComputer' is used, as the command itself indicates that Active Directory is operational and being managed.