SY0-701 Security Program Management and Oversight Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Open Active Directory Users and Computers, locate the user account, right-click the user and select Reset Password, then enter the new password, optionally check 'User must change password at next logon', and click OK.

  Why this is correct

  This is the correct sequence because Active Directory Users and Computers (ADUC) is the MMC snap-in used to manage user objects. You must first launch ADUC and navigate to the user's container or OU to select the exact account that needs the password reset. Only after the user object is selected can you right-click to open the Reset Password dialog, where you input the new password and optionally set 'User must change password at next logon' by toggling the pwdLastSet attribute to 0 for security enforcement. This order ensures the reset action is applied to the correct object and that the new password is entered only after the dialog is open.

• ✗

  Right-click the user and select Reset Password, then open Active Directory Users and Computers, locate the user account, then enter the new password and click OK.

  Why it's wrong here

  This order is functionally impossible because you cannot right-click a user and select 'Reset Password' before the ADUC console is open and the user account is displayed. The context menu with the 'Reset Password' option exists only on a user object within the ADUC interface, so the action must be initiated after the console is launched and the user is located. Attempting this sequence would mean you're right-clicking on empty space or an unopened window, which cannot invoke the password reset dialog. Thus, the correct sequence always places ADUC launch and user location before the right-click action.

• ✗

  Open Active Directory Users and Computers, right-click the user and select Reset Password, then locate the user account, then enter the new password and click OK.

  Why it's wrong here

  This order is incorrect because it places the right-click action before locating the user account within ADUC. Even if you have ADUC open, right-clicking without first navigating to the specific user can target the wrong object—such as an organizational unit, a group, or the incorrect user—which either prevents the Reset Password option from appearing or applies the reset to the wrong account. The 'Reset Password' option is only available when a user object is explicitly selected, so the precise user must be identified and highlighted before any right-click. Therefore, the sequence must be: open ADUC, locate the user, then right-click and select Reset Password.

• ✗

  Open Active Directory Users and Computers, locate the user account, then enter the new password and click OK, then right-click the user and select Reset Password.

  Why it's wrong here

  This order reverses the required dependency between the password input and the reset action. The password entry fields for a new password and the 'User must change password at next logon' checkbox are only presented after you right-click the user and select 'Reset Password' from the context menu. Before that action, there is simply no dialog in which to type the new password—ADUC does not allow direct modification of the unicodePwd attribute without invoking the reset dialog. Consequently, you cannot enter the password before opening the reset dialog; the reset context-menu command must come first, followed by entering the new password and clicking OK.

Go deeper

Related to this question