CyberArk Trustee – Privileged Access Management — Question 120

Which permissions are needed for the Active Directory user required by the Windows Discovery process?

Answer options

• A. Domain Admin
• B. LDAP Admin
• C. Read/Write
• D. Read

Correct answer: D

Explanation

The correct answer is 'Read' because the Windows Discovery process only requires read access to query Active Directory for necessary information. The other options, such as Domain Admin, LDAP Admin, and Read/Write, provide more permissions than are needed, which could pose a security risk.