CV0-003 Question #713: Real Exam Question with Answer & Explanation

The correct answer is D. Expired password. After approximately three months, a service account password used in the VM deployment script most likely expired under a standard 90-day policy, preventing LDAP domain joins.

Troubleshooting

Question

A cloud administrator has been using a custom VM deployment script. After three months of use, the script no longer joins the LDAP domain. The cloud administrator verifies the account has the correct permissions. Which of the following is the MOST likely cause of the failure?

Options

AIncorrect encryption ciphers
BBroken trust relationship
CInvalid certificates
DExpired password

Explanation

After approximately three months, a service account password used in the VM deployment script most likely expired under a standard 90-day policy, preventing LDAP domain joins.

Common mistakes.

A. Encryption cipher mismatches would cause failures immediately or after a deliberate configuration change, not predictably after a three-month interval.
B. A broken trust relationship is a computer account issue at the domain controller level and would not emerge gradually over time from a scripted service account.
C. Invalid certificates produce SSL/TLS handshake errors and are tracked separately with their own expiration dates, making them an unlikely coincidental cause at the three-month mark.

Concept tested. Service account password expiration causing automation script failures

Reference. https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/maximum-password-age

Topics

#LDAP domain join#expired password#VM deployment script#automation failure

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice