CV0-002 · Question #30
After deploying new VMs, the systems administrator notices it is not possible to connect to them using network credentials; however, local accounts work. After logging in, the administrator notices…
The correct answer is D. There is a time synchronization issue. The inability to connect using network credentials while local accounts work, combined with unset NTP servers, most likely indicates a time synchronization issue.
Question
After deploying new VMs, the systems administrator notices it is not possible to connect to them using network credentials; however, local accounts work. After logging in, the administrator notices the NTP servers are not set. Which of the following is MOST likely causing this issue?
Options
- ADirectory services requires the use of NTP servers.
- BThe VMs are insufficiently licensed.
- CThere is a directory services outage.
- DThere is a time synchronization issue.
How the community answered
(24 responses)- A8% (2)
- B4% (1)
- C4% (1)
- D83% (20)
Why each option
The inability to connect using network credentials while local accounts work, combined with unset NTP servers, most likely indicates a time synchronization issue.
While directory services environments rely on time synchronization, stating they 'require the use of NTP servers' doesn't directly explain *why* network credentials fail; a time synchronization *issue* is the more direct cause of the observed symptom.
Insufficient licensing would typically prevent the VM from operating fully or receiving updates, but it doesn't directly cause network credential authentication to fail while local accounts work.
A directory services outage would likely prevent local accounts from working if they are domain accounts cached locally, or prevent any domain-related activity. However, the specific clue about unset NTP servers points more directly to time synchronization as the issue rather than a general outage.
Network authentication protocols like Kerberos, commonly used with network credentials in directory services environments, are highly sensitive to time synchronization. If NTP servers are not set, the VMs' clocks can drift, causing authentication failures with domain controllers while local accounts remain unaffected.
Concept tested: Time synchronization impact on directory services authentication
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/windows-time-service/windows-time-service-tools-and-settings
Topics
Community Discussion
No community discussion yet for this question.