A county asks how local administrator rights on a workstation differ from domain user rights when planning Active Directory attack paths. What distinction matters most?
Select an answer to reveal the explanation.
Short Explanation
Local admin is the keys to one house; domain rights are the neighborhood association powers. House keys help grab wallets left on the counter. Association powers move you through the directory — keep those layers straight when planning paths.
Full Explanation
Host-local privilege enables control of that endpoint and classes of credential access on it, which can feed later movement. Domain privileges and group/ACL rights shape what the principal can do across Active Directory itself. The two layers are complementary, not identical, and neither should be assumed sufficient alone for every objective. Accurate path planning separates workstation privilege from directory privilege.