PrepAway - Latest Free Exam Questions & Answers

Which two settings should you configure?

Your network contains an Active Directory domain named adatum.com.

You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The
solution must minimize the amount of SYSVOL replication traffic caused by the audit.
Which two settings should you configure? (Each correct answer presents part of the solution.
Choose two.)

PrepAway - Latest Free Exam Questions & Answers

A.
Audit Policy\Audit system events

B.
Advanced Audit Policy Configuration\DS Access

C.
Advanced Audit Policy Configuration\Global Object Access Auditing

D.
Audit Policy\Audit object access

E.
Audit Policy\Audit directory service access

F.
Advanced Audit Policy Configuration\Object Access

6 Comments on “Which two settings should you configure?

    1. Babak says:

      mina is correct.cf
      clues in questions are these:” on all of the domain controllers” , “must minimize the amount of SYSVOL replication traffic” , “Which two settings”
      facts:
      -never mix advanced audit policy with basic audit policy.so definitely D is the incorrect choice.
      -Advanced Audit Policy Configuration\DS Access is for active directory domain services events not file system like sysvol.
      -the only setting that need another policy is Global Object Access Auditing.it should be configured with Advanced Audit Policy Configuration\Object Access.
      -Since you are not actually changing a file when you use Global Object Access Auditing, you are not going to trigger unnecessary replication with the act of setting up auditing tab in properties of the folders in file servers.you don’t touch the object themselves.

      consider these links:
      https://blogs.technet.microsoft.com/askds/2011/03/10/global-object-access-auditing-is-magic/
      https://www.petri.com/configure-global-object-access-auditing-windows-server




      1



      0
  1. Jeff says:

    Mina is right about Advanced and basic audit, so ignore the basic audit items. So A, D, & E are out.

    That leaves B, C, and F. We need two. Object access includes the file system and Global allows you to set the SACL for the entire computer. So Mina is correct. Here are some links:

    Object Access/Audit File share
    https://technet.microsoft.com/en-us/library/dn311489.aspx

    Global Object Access/File System:
    https://technet.microsoft.com/en-us/library/dn319112.aspx




    1



    0
  2. Calin says:

    from:
    https://issuu.com/tanatanawawasi/docs/current_microsoft_70-411_certificat
    CF

    Your network contains an Active Directory domain named adatum.com. You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit.
    Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)
    A. Audit Policy\Audit object access
    B. Audit Policy\Audit system events
    C. Audit Policy\Audit directory service access
    D. Advanced Audit Policy Configuration\Object Access
    E. Advanced Audit Policy Configuration\DS Access
    F. Advanced Audit Policy Configuration\Global Object Access Auditing
    Answer: DF

    somone have more experience in this field?




    0



    0

Leave a Reply