Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008 R2.
The network contains an enterprise certification authority (CA).
You need to ensure that all of the members of a group named Managers can view the event log entries for Certificate Services.
Which snap-in should you use?
A.
Active Directory Administrative Center
B.
Authorization Manager
C.
Certificate Templates
D.
Certificates
E.
Certification Authority
F.
Enterprise PKI
G.
Group Policy Management
H.
Security Configuration Wizard
I.
Share and Storage Management
Explanation:
There is mention of an Event Log Reader Group. Membership should be able to be configured in AD Users and Groups. Check this answer. In the MMFSH dump he has the anwser AD Users and Groups, however this is not a option here so I have left it Group Policy Management.
i think A is the true answer
and “G” not true
as Gpo’s linked to to sites , domain and ous’s but not to groups
0
0
A is not the correct answer. Adding them to a random group is going to do anything. The question specifically says the group already exists.
The only valid answers are E or G.
You could create a GPO (linked to the domain with security filtered to the CA, or the OU that contains the CA) that assigns permissions to the Managers group. Explained in the answer section here: http://class10e.com/Microsoft/which-snap-in-should-you-use-9/
You could also use the CA to add permissions to view the event logs (http://www.kurtdillard.com/StudyGuides/70-640/6.html, 1/3 of the way down)
0
0
I totally agree with Ahmed – ADAC can assign user to groups!
0
0
I have checked and G is correct to have to enable in GPO not ADAC.
0
0
I can make group Managers member to Event Log Readers.
What needs to be done in GPO ? pls explain
0
0
I can make group Managers member to Event Log Readers via ADAC.
What needs to be done in GPO ? pls explain
0
0
The following link is having the same question :
http://www.aiotestking.com/microsoft/2012/09/which-snap-in-should-you-use-2/
why then the right answer here is “active directory users and computers”
0
0
A
http://technet.microsoft.com/en-us/library/dd560651(v=ws.10).aspx
0
0