Which of the following commands would BEST accomplish this?

A penetration tester has a full shell to a domain controller and wants to discover any user account that has not authenticated to the domain in 21 days.

Which of the following commands would BEST accomplish this?
A . dsrm -users "DN=compony.com; OU=hq CN=usera"
B . dsuser -name -account -limit 3
C . dsquery uaer -inactive 3
D . dsquery -o -rein -limit 21

View Answer

Answer: C