CyberArk Sentry – Privileged Cloud — Question 90

Which permissions does the account need to perform a Domain scan to discover Windows accounts? (Choose two.)

Answer options

• A. Domain admin permissions on Active Directory
• B. Read permissions on Active Directory
• C. Reset user passwords on Active Directory
• D. Local administrator permissions on Windows servers
• E. Read permissions on Windows servers

Correct answer: B, E

Explanation

The correct answers are B and E because read permissions on Active Directory and Windows servers are sufficient to discover Windows accounts. Domain admin permissions (A) and resetting user passwords (C) are not required for scanning, while local administrator permissions (D) pertain to server-level access rather than domain scanning.