Exam SY0-501 topic 1 question 930 discussion

sorry no C. Create different accounts for each region, limit their logon times, and alert on risky logins would be the BEST option to help mitigate the concern of hackers gaining access to the service account and pivoting through the global network. This approach would limit the impact of compromised credentials by providing unique accounts for each region with limited logon times and monitoring for any risky logins. Push MFA notifications (option A) could also be used, but it would not mitigate the risk of pivoting through the network. Enforcing Kerberos authentication (option B) and creating a guest account with password reuse blocking (option D) do not address the concern of privileged access and potential pivoting.

Okay, I think I got it. So C sounds like simply Detection of an attack rather than actual mitigation. MFA (multifactor authentication)would take it a step further in mitigating attacker from gaining access into the network.

"limit the logon times" what if the genuinely need to access the account due to emergency and because of this they wont be able to access the account. Could lead to dos

I agree MFA is needed so, A , there is nothing wrong with c but a is better answer

Change a friend!!