nerdexam
Microsoft

70-695 · Question #15

After the planned migration, you need to gather data from the client computers on the Contoso network. Which is the best account to use to achieve the goal? More than one answer choice may achieve…

The correct answer is C. Fabrikam\User2. To gather data from client computers on the Contoso network after a planned migration, the best account to use is Fabrikam\User2, representing a delegated user from the new managing domain.

Manage User State Migration

Question

After the planned migration, you need to gather data from the client computers on the Contoso network. Which is the best account to use to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

Options

  • AFabrikam\Administrator
  • BContoso\Administrator
  • CFabrikam\User2
  • DFabrikam\User1

How the community answered

(25 responses)
  • A
    16% (4)
  • B
    4% (1)
  • C
    76% (19)
  • D
    4% (1)

Why each option

To gather data from client computers on the Contoso network after a planned migration, the best account to use is Fabrikam\User2, representing a delegated user from the new managing domain.

AFabrikam\Administrator

Fabrikam\Administrator would have excessive privileges for simply gathering data, violating the principle of least privilege for a routine task.

BContoso\Administrator

Contoso\Administrator would have sufficient access, but if a migration has occurred and Fabrikam is the new managing domain, using an account from the old Contoso domain might not be the best long-term or most secure practice.

CFabrikam\User2Correct

Fabrikam\User2 is the best account because, following a planned migration, this account from the new managing domain (Fabrikam) would likely be specifically configured with the minimum necessary permissions on the Contoso client computers to perform data gathering. This aligns with the security principle of least privilege, ensuring the task is completed without granting excessive administrative access.

DFabrikam\User1

Fabrikam\User1 is similar to Fabrikam\User2, but the question specifies User2 as the correct answer, implying Fabrikam\User2 is the specifically provisioned account for this data gathering task.

Concept tested: Delegated administration and least privilege principle

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/service-principal-least-privilege

Topics

#data gathering#user state migration#permissions#network access

Community Discussion

No community discussion yet for this question.

Full 70-695 Practice