A small company has one IT administrator who manages all systems. The administrator's account is a member of Domain Admins and is used for daily email and web browsing. The company wants to reduce the risk of credential theft while maintaining the ability to perform administrative tasks. Which change should be implemented first?

Disable the administrator's account after business hours.

Require the administrator to change their password every 30 days.

Create a separate unprivileged account for daily activities and a dedicated admin account for administrative tasks.

Install an endpoint protection agent on the administrator's workstation.

What is the purpose of periodic reviews of administrative access?

To automatically rotate passwords.

To eliminate the need for monitoring.

To ensure that access rights remain appropriate and up-to-date.

To grant additional permissions to all administrators.

An organization has a legacy application that requires a service account with domain admin privileges to run. The security team wants to reduce the risk associated with this service account. Which action is most effective?

Work with the vendor to refactor the application to use least-privilege service accounts.

Use a Group Managed Service Account (gMSA) with automatic password management and restrict its use to the specific server.

Document the exception and require approval for the service account's privileges.

Set the service account password to never expire and store it in a secure vault.

An organization is implementing MFA for all administrative access. Some administrators use legacy applications that do not support MFA. Which approach should be taken to maintain security?

Exempt the legacy applications from MFA because they are internal.

Use a shared MFA token for all administrators to access the legacy applications.

Require MFA only on the workstation login and allow the legacy application to use single sign-on.

Place the legacy applications behind a secure gateway that enforces MFA before access is granted.

A small company has one IT administrator who needs to manage the domain and the file server. The administrator also performs routine user support. Which approach best applies least privilege and separation of duties, considering the company size?

Create two accounts: one with domain admin privileges for server management and a standard user account for support tasks.

Give the administrator local admin rights on all workstations and use that account for domain management.

Use a single domain admin account for all tasks, since the company is small and there is no one else to share duties.

Create a service account with domain admin rights and use it for all administrative tasks.

GIAC Defending Advanced Threats

Domain 3Objective 1

Administrative Access GDAT Practice Questions (Page 1)

Part of the Credential and Privilege Management domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 1–5

1application · medium
A small company has one IT administrator who manages all systems. The administrator's account is a member of Domain Admins and is used for daily email and web browsing. The company wants to reduce the risk of credential theft while maintaining the ability to perform administrative tasks. Which change should be implemented first?
Select an answer first
2foundation · easy
What is the purpose of periodic reviews of administrative access?
Select an answer first
3application · medium
An organization has a legacy application that requires a service account with domain admin privileges to run. The security team wants to reduce the risk associated with this service account. Which action is most effective?
Select an answer first
4application · medium
An organization is implementing MFA for all administrative access. Some administrators use legacy applications that do not support MFA. Which approach should be taken to maintain security?
Select an answer first
5application · medium
A small company has one IT administrator who needs to manage the domain and the file server. The administrator also performs routine user support. Which approach best applies least privilege and separation of duties, considering the company size?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDAT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDAT” is a trademark of its owner, used for identification only.