CV0-003 · Question #713
A cloud administrator has been using a custom VM deployment script. After three months of use, the script no longer joins the LDAP domain. The cloud administrator verifies the account has the…
The correct answer is D. Expired password. After approximately three months, a service account password used in the VM deployment script most likely expired under a standard 90-day policy, preventing LDAP domain joins.
Question
A cloud administrator has been using a custom VM deployment script. After three months of use, the script no longer joins the LDAP domain. The cloud administrator verifies the account has the correct permissions. Which of the following is the MOST likely cause of the failure?
Options
- AIncorrect encryption ciphers
- BBroken trust relationship
- CInvalid certificates
- DExpired password
How the community answered
(33 responses)- A9% (3)
- B3% (1)
- C15% (5)
- D73% (24)
Why each option
After approximately three months, a service account password used in the VM deployment script most likely expired under a standard 90-day policy, preventing LDAP domain joins.
Encryption cipher mismatches would cause failures immediately or after a deliberate configuration change, not predictably after a three-month interval.
A broken trust relationship is a computer account issue at the domain controller level and would not emerge gradually over time from a scripted service account.
Invalid certificates produce SSL/TLS handshake errors and are tracked separately with their own expiration dates, making them an unlikely coincidental cause at the three-month mark.
Many organizations enforce a 90-day maximum password age on all accounts, including service accounts embedded in automation scripts. After three months the stored credentials become invalid, causing domain join failures even though the account permissions remain correct. The time-correlated failure combined with confirmed correct permissions strongly points to credential expiration rather than an authorization or configuration issue.
Concept tested: Service account password expiration causing automation script failures
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/maximum-password-age
Topics
Community Discussion
No community discussion yet for this question.