A county asks whether Azure AD / Entra hybrid identity topics are automatically core to a CPTS-style on-prem Active Directory engagement. What is the right scope stance?
Select an answer to reveal the explanation.
Short Explanation
Stay on the map you were hired to walk. If the RoE is on-prem AD paths, do not wander into a different cloud-identity exam just because hybrid exists somewhere. Scope first; specialty detours only when authorized.
Full Explanation
CPTS-oriented Active Directory work centers on authorized on-prem directory enumeration and path analysis unless the engagement explicitly includes hybrid cloud identity. Automatically abandoning on-prem findings for Entra/M365 specialty topics violates scope discipline. Hybrid may matter when in scope, but it does not erase Kerberos, ACL, and group-path analysis. Keep reporting aligned to agreed boundaries.