Administrative Access GDAT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company wants to enforce a policy that administrative passwords must be unique and not reused across systems. Which control is most effective?

   • AStore passwords in a password manager and manually change them quarterly.
   • BUse a privileged access management solution that automatically generates and rotates unique passwords for each system.
   • CCreate a password policy that requires a minimum length of 15 characters and complexity.
   • DUse the same strong password for all systems to simplify management.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of regularly rotating administrative credentials?

   • ATo limit the window of opportunity if credentials are compromised.
   • BTo eliminate the need for multi-factor authentication.
   • CTo ensure that all administrators use the same password.
   • DTo make passwords easier to remember.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   During a review, the security team discovers that a service account with Domain Admin privileges has been used to log in interactively to a file server. The team needs to detect and investigate such usage in the future. Which control should be implemented?

   • ADisable the service account's ability to log on locally via Group Policy.
   • BChange the service account password every 30 days and document the change.
   • CEnable auditing of account logon events and review logs for interactive logons by service accounts.
   • DRemove the service account from Domain Admins and assign only the necessary permissions.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security architect is designing MFA for a hybrid environment where administrators access both on-premises and cloud resources. The solution must support phishing-resistant MFA and provide a consistent experience. Which approach is most appropriate?

   • AUse a different MFA solution for each resource to avoid vendor lock-in.
   • BImplement MFA only for cloud access, since on-premises is protected by the firewall.
   • CUse SMS-based MFA for cloud access and hardware tokens for on-premises access.
   • DUse a single identity provider with phishing-resistant MFA methods (e.g., FIDO2) for both on-premises and cloud access.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which policy should be enforced when an administrator leaves the organization?

   • AImmediately revoke all administrative access.
   • BAllow access to remain for a grace period.
   • CDisable the account only after the next audit.
   • DChange the administrator's password but keep the account active.
   Reveal Solution Discussion Select an answer first