Exam SY0-601 topic 1 question 121 discussion

Service accounts are a special type of non-human privileged account used to execute applications and run automated services, virtual machine instances, and other processes. Service accounts can be privileged local or domain accounts, and in some cases, they may have domain administrative privileges

A service account is a special type of user account that is created specifically to run applications, services, or automated tasks on a computer system.

Service acc

The correct answer is B. Shared. A Service account is typically used for automated processes or services, not for application access. A Generic account is not recommended as it is not secure and can lead to unauthorized access. An Admin account has elevated privileges, which is not necessary for an application that only needs to read and write data. A Shared account, on the other hand, is designed for multiple users or applications to access a database, making it the most appropriate choice in this scenario. It provides access to the database without granting excessive privileges, ensuring data security and segregation of duties.

Some applications and services need to run under the context of an account, and a service account fills this need. As an example, SQL Server is a database application that runs on a server, and it needs access to resources on the server and the network. Administrators create a regular user account, name it something like sqlservice, assign it appropriate privileges, and configure SQL Server to use this account.

service account can't be shared between or among departments. generic account can be shared ,but should not be used .

A. Service

A. Service The most appropriate account type for an application that needs to read and write data to a shared database is a "Service" account. Service accounts are used to run specific services or applications in a controlled manner, allowing them to access resources and perform specific actions on behalf of the application or service they represent. In this scenario, the application needs to interact with the database on a regular basis, so a dedicated service account should be created for it. This service account should have the necessary permissions to read and write data to the specific tables or data objects required by the application. Using a service account provides better control and accountability over the actions performed by the application. It allows the database administrator to restrict the application's access to only the required resources and minimize the risk of unauthorized access to other parts of the database that are unrelated to the application's functionality.

A service account is typically used for applications and services that need access to specific resources, such as a database. In this scenario, the application that reads and writes data to the database should have its own dedicated service account. By using a service account, the access can be specifically granted and restricted as needed, providing appropriate permissions for the application to interact with the database without compromising other accounts used by the finance department or other applications. Option B (Shared), Option C (Generic), and Option D (Admin) are not suitable choices in this context. Shared and Generic accounts are not specifically intended for application access, and granting admin privileges to an application is unnecessary and risky, as it may lead to unauthorized access or actions. It is always best practice to use the least privilege principle and provide only the necessary permissions for the application to perform its required tasks.

"Service accounts. Some applications and services need to run under the context of an account, and a service account fills this need. As an example, SQL Server is a database application that runs on a server, and it needs access to resources on the server and the network. Administrators create a regular user account, name it something like sqlservice, assign it appropriate privileges, and configure SQL Server to use this account. Note that this is like a regular end-user account. The only difference is that it’s used by the service or application, not an end user. Credential policies may require long, complex passwords for these accounts, but they should not expire. If the password expires, the account can no longer log on, and the service or application will stop." -Security+ Get Certified Get Ahead SY0-601 by Darril Gibson

Service accounts are accounts that specific applications or services use to interact with the system. For example, if you have an FTP server that interacts with an FTP service, you might use a service account with limited permissions to allow that service to access the system. This enables you to apply very tight security controls to the service account, rather than using a general user account to perform the activity

A is correct.

A. Service account is the most appropriate for this purpose.

"A database administrator wants to grant access to an application". Service accounts are created for apps and services.

A. Service accounts are associated with applications and services.

generic account A preset, standard, common, guest, fixed, shared, or anonymous user account.

Service accounts are used by scheduled processes and application server software such as databases