ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-501 All Questions

View all questions & answers for the SY0-501 exam
Go to Exam

Exam SY0-501 topic 1 question 52 discussion

Actual exam question from CompTIA's SY0-501
Question #: 52
Topic #: 1
[All SY0-501 Questions]

A systems administrator is attempting to recover from a catastrophic failure in the datacenter. To recover the domain controller, the systems administrator needs to provide the domain administrator credentials. Which of the following account types is the systems administrator using?

  • A. Shared account
  • B. Guest account
  • C. Service account
  • D. User account
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by ToPH at Sept. 7, 2019, 11:20 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
LD774
Highly Voted 5 years ago
this is the exact same question as #52 answer is D on that one.
upvoted 24 times
Kakster
3 years, 9 months ago
This IS question #52!
upvoted 2 times
...
...
stoda
Highly Voted 5 years, 3 months ago
this should be User account. service accounts should not have domain admin privileges as they do not expire and if they are hijacked this means the domain is compromised
upvoted 9 times
MelvinJohn
5 years, 2 months ago
Concur. It is a severe security breach to give any Security account Domain Admin rights and privileges. A Domain Admin is just a Domain User with more rights and privileges. But a Service account is created to run a Windows Service app. You can display those services (stopped and started services) with the Net Start command or via Administrative Tools.
upvoted 6 times
...
...
9e39727
Most Recent 2 years, 1 month ago
Selected Answer: D
User Account. Just adding this as a vote comment
upvoted 1 times
...
JRA3420
3 years, 9 months ago
Why is the answer Service Account? My understanding was service accounts are run by, well, services, are aren't interacted with by users directly
upvoted 1 times
...
Daymeyon
4 years, 3 months ago
I believe (in typical comp tia fashion) the answer is A. If you had a catastrophic failure you'd first start out in Directory Services Restore Mode first. I think all those saying user account and domain admin are jumping pass the first step. the DSRM for a DC would be a local admin account. So technically the answer could be either A or D, user account could be either local or domain and this account is very specifically a local user account.
upvoted 1 times
...
NYF
4 years, 5 months ago
It should be User Account. "Any service accounts that “require” Domain Controller rights should be severely limited – no service account should get membership in Domain Admins just for DC install. Any system/agent that can install/run code on a Domain Controller can elevate to Domain Admin, this includes all accounts that manage that system"https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-accounts
upvoted 1 times
...
Ukruf
4 years, 5 months ago
Guest and service accounts are non-privileged accounts. A domain controller by definition must be part of a domain. Since it can't function in a local or non-domain mode, there's no need for local accounts. User account is the answer
upvoted 1 times
...
Ukruf
4 years, 5 months ago
Guest and service accounts are non-privileged accounts. A domain controller by definition must be part of a domain. Since it can't function in a local or non-domain mode, there's no need for local accounts. C. User account is the answer
upvoted 1 times
...
Not_My_Name
4 years, 6 months ago
'D' is correct. In Windows, there is a Domain Administrator group. User accounts (typically belonging to an Administrator) are added to this group in order to provide the user with these elevated privileges. Poorly configured Service Accounts 'may' also be added to this group, but they remain a different type of account. Users use User Accounts.
upvoted 1 times
...
Aerials
4 years, 9 months ago
This is a copy of a later question where D is the correct answer. We need confirmation of the correct answer.
upvoted 1 times
...
MagicianRecon
4 years, 10 months ago
Would go with C https://adsecurity.org/?p=4115
upvoted 1 times
...
ckr8
4 years, 10 months ago
q 52 same question and answer is user account. Any way to confirm the right answer
upvoted 4 times
...
Wilfred
4 years, 10 months ago
This is the same question as no.49. Then why No.49 is user account and this one is service account???
upvoted 2 times
...
SimonR2
4 years, 10 months ago
The answer is user account. A service account is nothing to do with this. Service accounts are used by applications like SQL server or MFD printers for example.
upvoted 2 times
EPSBAL
4 years, 10 months ago
The correct account would be used called "Directory Services Restore Mode (DSRM) administrator", and is indeed a user account. In context of this question I would choose "Service account". However, it only used to login into DSRM and cannot be used to login during normal AD operation. MS defines service accounts as "A service account is a user account that is created explicitly to provide a security context for services running on Windows Server operating systems" https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/service-accounts
upvoted 3 times
...
...
ClintBeavers
4 years, 12 months ago
last time this question was asked the answer was user account and the comments basically said that service account are for automated functions. this is very confusing
upvoted 3 times
...
Qabil
5 years ago
{sorry I mean user account not customer account }
upvoted 2 times
...
Qabil
5 years ago
I thing we have seen same question and their answer was costumer so right now it seem they have different answer
upvoted 2 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago