StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 41 of 506 · easy

A supported web service runs on three domain member servers and needs one identity with automatic password rotation. Which account type fits?

Choose the single best answer.

  1. A.LocalService with its anonymous network identity
  2. B.One sMSA shared by all three hosts
  3. C.A gMSA authorized for the three computer accounts
  4. D.A Domain Admin user with a manually shared password
Show the answer and explanation

✓ Correct answer

  • A gMSA authorized for the three computer accounts

A gMSA supports multiple approved hosts and managed passwords. An sMSA is for one host; LocalService does not provide the required shared domain identity. A shared Domain Admin password violates the least-privilege service design.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.