Information Technology Reference
In-Depth Information
This section contains the solutions to the thought experiments and answers to the lesson
review questions in this chapter.
Objective 5.1: thought experiment
Correct answer:
D. Because you want to run this as a scheduled task, it needs to run
as a gMSA, not a stand-alone MSA. Virtual accounts would not have access to network
resources without giving the entire computer account access.
1.
Because you're running a gMSA, you have to initialize the KDS root key with
Add-KDSRootKey
,
if it hasn't been done already. If it has been done, no additional
initialization needs to be done.
2.
Because the script will run as a scheduled job, it won't have access to the console.
You need to ensure that output is redirected appropriately and that no user input is
required. Also, ensure that you explicitly set any necessary environmental variables
inside the script.
3.
Objective 5.1: review
Correct answer:
C
1.
Incorrect
. This tool could be used to create a local service account only.
A.
Incorrect
. This tool could be used to create a domain service account.
B.
Correct
. This command creates a new MSA with the -Standalone parameter.
C.
Incorrect
. This command installs the service account on a computer, but doesn't
create it.
D.
Incorrect
. This command assigns a service account to a computer, but doesn't
create it.
E.
Correct answer:
B
2.
Incorrect
. This command adds an object to an Active Directory group.
A.
Correct
. This command installs the service account onto the computer that will
use it.
B.
Incorrect
. This command doesn't exist. Instead of simply adding the account,
you're actually installing it.
C.
Incorrect
. This command doesn't exist. There is a Windows PowerShell
Add-ADComputerServiceAccount cmdlet, but it only assigns the account as
available to the computer; it doesn't actually install it on the computer.
D.
