An administrator plans to install the Windows-Based User-ID Agent. What type of Active Directory (AD) service account should the administrator use?

The correct answer is A. Dedicated Service Account. When installing the Windows-Based User-ID Agent for integration with Active Directory, it is recommended to use a Dedicated Service Account. This account should have the necessary permissions to read Active Directory data but does not need to have broad administrative…

Submitted by jaden.t· Apr 18, 2026Deploy and Configure

Question

Options

ADedicated Service Account
BSystem Account
CDomain Administrator
DEnterprise Administrator

How the community answered

(42 responses)

A
86% (36)
B
7% (3)
C
5% (2)
D
2% (1)

Explanation

When installing the Windows-Based User-ID Agent for integration with Active Directory, it is recommended to use a Dedicated Service Account. This account should have the necessary permissions to read Active Directory data but does not need to have broad administrative privileges like those of a Domain Administrator or Enterprise Administrator. Using a dedicated service account helps adhere to the principle of least privilege and enhances security. A Domain Administrator or Enterprise Administrator account would provide more permissions than necessary and is not recommended for this task, as it goes against best security practices.

Topics

#User-ID Agent#Active Directory#Service Accounts#Least Privilege

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice