nerdexam
GIAC

GCIH · Question #824

Which of the following accounts is an Administrator account?

The correct answer is B. tcorrigan. Of the listed accounts, tcorrigan is identified as an Administrator based on its group membership visible in the associated system output.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following accounts is an Administrator account?

Options

  • Arsquirrel
  • Btcorrigan
  • Ccderpington
  • DIISAdmin

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    95% (52)
  • D
    4% (2)

Why each option

Of the listed accounts, tcorrigan is identified as an Administrator based on its group membership visible in the associated system output.

Arsquirrel

rsquirrel does not have Administrators group membership reflected in the account details and is a standard user account.

BtcorriganCorrect

tcorrigan is shown as a member of the local Administrators group in the accompanying account details, which grants full administrative privileges on the Windows system. Administrator group membership - not just an administrative-sounding name - is the definitive indicator of elevated privilege.

Ccderpington

cderpington does not have Administrators group membership reflected in the account details and is a standard user account.

DIISAdmin

IISAdmin is a service account associated with Internet Information Services and does not have full local Administrator group membership despite its naming.

Concept tested: Windows local Administrator group membership identification

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups

Topics

#Windows accounts#privilege identification#account enumeration#Active Directory

Community Discussion

No community discussion yet for this question.

Full GCIH Practice