A penetration tester is configuring a vulnerability management solution to perform credentialed scans of an Active Directory server. Which of the following account types should the tester provide to the scanner?
Correct Answer: B
To perform credentialed scans on an Active Directory (AD) server, the scanner requires high-level access to retrieve system configuration, patch levels, and user rights. A Domain Administrator account ensures full visibility into domain resources and permissions, which is essential for a complete vulnerability assessment.
From the CompTIA PenTest+ PT0-003 Objectives - Domain 2.0: Information Gathering and Vulnerability Identification:
"Credentialed scans require administrative-level access on target systems to provide detailed insights into software versions, missing patches, and security settings."