PCNSE · Question #833
PCNSE Question #833: Real Exam Question with Answer & Explanation
The correct answer is A: Dedicated Service Account. When installing the Windows-Based User-ID Agent for integration with Active Directory, it is recommended to use a Dedicated Service Account. This account should have the necessary permissions to read Active Directory data but does not need to have broad administrative privileges
Question
An administrator plans to install the Windows-Based User-ID Agent. What type of Active Directory (AD) service account should the administrator use?
Options
- ADedicated Service Account
- BSystem Account
- CDomain Administrator
- DEnterprise Administrator
Explanation
When installing the Windows-Based User-ID Agent for integration with Active Directory, it is recommended to use a Dedicated Service Account. This account should have the necessary permissions to read Active Directory data but does not need to have broad administrative privileges like those of a Domain Administrator or Enterprise Administrator. Using a dedicated service account helps adhere to the principle of least privilege and enhances security. A Domain Administrator or Enterprise Administrator account would provide more permissions than necessary and is not recommended for this task, as it goes against best security practices.
Topics
Community Discussion
No community discussion yet for this question.