CompTIA Server+ SK0-005 Practice Question
A Windows Server administrator is deploying an in-house application that runs as a service and creates nightly backups on a UNC share hosted by another server. The security team requires that the service identity
- be unique to the application (not a built-in account),
- authenticate to network resources without exposing a reusable password, and
- follow the principle of least privilege with minimal ongoing maintenance by administrators.
Which type of account BEST meets all of these requirements?
Configure the service to run under the built-in Local System account.
Use the built-in Local Service account for the application.
Create a dedicated Domain Admin user account for the service.
Create a domain group Managed Service Account (gMSA) and assign it to the service.