Question

Which of the following is not a benefit of domain controller?

• A. Potential to be hacked
• B. Encryption of user data
• C. Centralised user management
• D. Enables resource sharing for files and printers

Hint:

Always separate the structural advantages of centralization (like simplified user management and policy enforcement) from its drawbacks (such as creating a single point of failure or a high-value target for hackers).

Answer 1

The Correct Option is A

Step 1: Categorizing Advantages vs. Vulnerabilities:
When evaluating an enterprise IT system like a Domain Controller, it is critical to distinguish between operational benefits and security risks or vulnerabilities.

Step 2: Analyzing the Options:

• Encryption of user data (B): A major advantage. Active Directory secures user credentials, passwords, and communication data using strong encryption (such as Kerberos encryption).
• Centralised user management (C): A key operational benefit. IT administrators can create, modify, or disable user accounts across the entire network from a single, central console instead of managing each computer individually.
• Enables resource sharing (D): An essential administrative benefit. A DC coordinates access control lists (ACLs) to enable secure file and printer sharing across the network.
• Potential to be hacked (A): A significant security vulnerability and threat. Because a DC acts as a single centralized clearinghouse for all credentials, it is a high-value target for hackers. If compromised, the entire network is exposed.

Step 3: Conclusion:
The potential to be hacked (A) is a major security risk and limitation, not an operational benefit. Thus, option (A) is correct.