70-695 · Question #15
After the planned migration, you need to gather data from the client computers on the Contoso network. Which is the best account to use to achieve the goal? More than one answer choice may achieve…
The correct answer is C. Fabrikam\User2. To gather data from client computers on the Contoso network after a planned migration, the best account to use is Fabrikam\User2, representing a delegated user from the new managing domain.
Question
After the planned migration, you need to gather data from the client computers on the Contoso network. Which is the best account to use to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
Options
- AFabrikam\Administrator
- BContoso\Administrator
- CFabrikam\User2
- DFabrikam\User1
How the community answered
(25 responses)- A16% (4)
- B4% (1)
- C76% (19)
- D4% (1)
Why each option
To gather data from client computers on the Contoso network after a planned migration, the best account to use is Fabrikam\User2, representing a delegated user from the new managing domain.
Fabrikam\Administrator would have excessive privileges for simply gathering data, violating the principle of least privilege for a routine task.
Contoso\Administrator would have sufficient access, but if a migration has occurred and Fabrikam is the new managing domain, using an account from the old Contoso domain might not be the best long-term or most secure practice.
Fabrikam\User2 is the best account because, following a planned migration, this account from the new managing domain (Fabrikam) would likely be specifically configured with the minimum necessary permissions on the Contoso client computers to perform data gathering. This aligns with the security principle of least privilege, ensuring the task is completed without granting excessive administrative access.
Fabrikam\User1 is similar to Fabrikam\User2, but the question specifies User2 as the correct answer, implying Fabrikam\User2 is the specifically provisioned account for this data gathering task.
Concept tested: Delegated administration and least privilege principle
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/service-principal-least-privilege
Topics
Community Discussion
No community discussion yet for this question.