az-801 Practice Question 1907
Exam: az-801
Domain: Secure Windows Server on-premises and hybrid infrastructures
Topic: Secure a hybrid Active Directory infrastructure
Difficulty: medium
In a hybrid Active Directory environment, you need to secure a group of sensitive services running on Windows servers. Which of the following should you implement to ensure that these services can securely access shared resources without hard-coded credentials?
Answer Options
A
Local user accounts
B
Group Managed Service Accounts (gMSA)
C
Standard managed service accounts
D
Virtual machines with managed identities
Correct Answer
B: Group Managed Service Accounts (gMSA)
Explanation
Group Managed Service Accounts (gMSA) provide a way to run services under a managed service account that has its own dedicated credentials, which are automatically rotated. This ensures that services can securely access shared resources without the need for hard-coded credentials, thus improving security. Other options like local user accounts, standard managed service accounts, or virtual machines with managed identities do not offer the same level of security and credential management.