SY0-501 · Question #466
A systems administrator is attempting to recover from a catastrophic failure in the datacenter. To recover the domain controller, the systems administrator needs to provide the domain administrator…
The correct answer is D. User account. The administrator uses a user account, specifically one granted domain administrator credentials, to log in and perform recovery operations on a domain controller.
Question
A systems administrator is attempting to recover from a catastrophic failure in the datacenter. To recover the domain controller, the systems administrator needs to provide the domain administrator credentials. Which of the following account types is the system administrator using?
Options
- AShared accounts
- BGuest account
- CService account
- DUser account
How the community answered
(17 responses)- B12% (2)
- C6% (1)
- D82% (14)
Why each option
The administrator uses a user account, specifically one granted domain administrator credentials, to log in and perform recovery operations on a domain controller.
Shared accounts are generally discouraged for administrative tasks due to a lack of individual accountability and auditability, and are not the standard type for providing specific administrator credentials.
A guest account provides very limited permissions and is explicitly not suitable for performing high-privilege administrative tasks such as recovering a domain controller.
Service accounts are designed for applications and services to run under in the background, not for human administrators to log on directly and perform interactive recovery operations.
A domain administrator logs into the system using a specific user account that has been granted the necessary administrative rights within the Active Directory domain. This user account, with its elevated privileges, is then used to perform critical tasks like domain controller recovery.
Concept tested: Active Directory account types for administrative logon
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-accounts
Topics
Community Discussion
No community discussion yet for this question.