nerdexam
GIAC

GCIH · Question #684

Which of the following user accounts is the default Administrator account?

The correct answer is B. JoePowershell. This question tests the ability to identify the built-in default Administrator account among a list of user accounts within a specific lab environment.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following user accounts is the default Administrator account?

Options

  • AJustAnotherUser
  • BJoePowershell
  • CJaneSamba
  • DJeremyIIS

How the community answered

(68 responses)
  • A
    1% (1)
  • B
    93% (63)
  • C
    3% (2)
  • D
    3% (2)

Why each option

This question tests the ability to identify the built-in default Administrator account among a list of user accounts within a specific lab environment.

AJustAnotherUser

JustAnotherUser is a name indicating a standard, non-privileged user account with no built-in administrative role.

BJoePowershellCorrect

JoePowershell is the default Administrator account in this scenario. The built-in Windows Administrator account carries a well-known RID of 500 and may be renamed, but retains its privileged built-in status - in this lab context, JoePowershell is that account identifiable by its SID suffix or group membership.

CJaneSamba

JaneSamba is a name indicating a Samba service account, not the built-in default Administrator account.

DJeremyIIS

JeremyIIS is a name indicating an IIS web server service account, not the built-in default Administrator account.

Concept tested: Identifying the built-in Windows Administrator account

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts

Topics

#Windows accounts#default administrator#user identification#account enumeration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice