VMware 3V0-752 Exam - Topic 2 Question 39 Discussion

Actual exam question for VMware's 3V0-752 exam

Question #: 39
Topic #: 2

An architect is designing Active Directory (AD) permissions for a Horizon environment that will use pre-existing computer accounts. The AD Security Team has restrictions about the use of service accounts.

What two sets of minimum permission are needed to delegate to an AD service account? (Choose two.)

ACreate Computer Objects, Delete Computer Objects

BList Contents, Read All Properties

CRead Permissions, Reset Password

DWrite Permissions, Change Password
References:

Show Suggested Answer

Suggested Answer: A, C

by Ashlyn at May 09, 2022, 05:00 PM

Limited Time Offer

25%

Off

Get Premium 3V0-752 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carmela

4 months ago

I always thought you needed more permissions than just those!

upvoted 0 times

...

Yan

4 months ago

Wait, are we sure about A? Seems risky.

upvoted 0 times

...

Arlette

4 months ago

Definitely A and B, no doubt about it!

upvoted 0 times

...

Trevor

4 months ago

I think C and D might be more relevant.

upvoted 0 times

...

Loren

4 months ago

A and B are the right choices.

upvoted 0 times

...

Theresia

5 months ago

D sounds like it could be relevant, but I’m not sure if we need to change passwords for a service account. I guess it depends on the context of the environment.

upvoted 0 times

...

Jerrod

5 months ago

I practiced a similar question before, and I feel like C could be important for managing user accounts, but I'm not confident about the second option.

upvoted 0 times

...

Denae

5 months ago

I remember something about needing to read properties for delegation, which could point to B, but I'm not entirely sure if that's enough.

upvoted 0 times

...

Maryln

5 months ago

I think we might need to focus on permissions that allow the service account to manage computer objects, so maybe A is one of the answers?

upvoted 0 times

...

Genevive

5 months ago

I'm pretty sure the counter variable is local, so any changes outside the For Each scope won't affect the next iteration. Let me double-check that.

upvoted 0 times

...

Marjory

5 months ago

I'm pretty confident about this one. I think option B is the incorrect statement - you can't just use an AK to manipulate resources, there are other security checks involved.

upvoted 0 times

...

Graciela

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully read through the options and think about how the Cisco Umbrella Reporting API works.

upvoted 0 times

...

Colene

5 months ago

Hmm, this is a tricky one. I'll need to think carefully about the different phone association options.

upvoted 0 times

...

Jamal

5 months ago

Okay, let me think this through. I know the Salesforce Trust website is where they share information about platform updates and maintenance, so that seems like the most likely place to find release dates.

upvoted 0 times

...

Kris

5 months ago

Hmm, this one seems straightforward. The Service Perimeter Guard pattern is definitely used to protect against both data-oriented and access-oriented attacks, so I'll go with True on this one.

upvoted 0 times

...