This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Which built-in identity has minimal local privileges but presents the computer's identity on the network?
LocalService
NetworkService
LocalSystem
A web app runs behind a network load balancer across three servers. Which account type should you use?
Standalone Managed Service Account (sMSA)
Group Managed Service Account (gMSA)
Virtual account
What one-time step must you complete in the forest before you deploy your first gMSA?
Run Install-ADServiceAccount on each server.
Create the KDS root key.
Raise the domain functional level to Windows Server 2025.
Which statement about delegated Managed Service Accounts (dMSA) is correct?
You can migrate an existing gMSA directly to a dMSA.
A dMSA binds authentication to a device identity to help prevent Kerberoasting.
A dMSA password is cached on every member server.
You must answer all questions before checking your work.
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?