Your network contains an Active Directory domain named adatum.com.
You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The
solution must minimize the amount of SYSVOL replication traffic caused by the audit.
Which two settings should you configure? (Each correct answer presents part of the solution.
Choose two.)
A.
Audit Policy\Audit system events
B.
Advanced Audit Policy Configuration\DS Access
C.
Advanced Audit Policy Configuration\Global Object Access Auditing
D.
Audit Policy\Audit object access
E.
Audit Policy\Audit directory service access
F.
Advanced Audit Policy Configuration\Object Access
why not CF?
“Basic audit policy is !not compatible! with advanced audit policy settings that are applied by using Group Policy in Windows Server 2008 R2 and Windows 7.” -> no DF
F will audit changes to SYSVOL shares, so F is one half of the answer.
B|C|D ?
0
0
B creates a lot of traffic but in theory I could get the result but it would not follow the required condition, C high traffic but also in this case might be correct at the end I think that the right answers are exactly D and F
0
0
The correct answer is C,F .
D policies can’t be combined with F policies.
Anyway, this is not a “real life” solution for sysvol monitoring.
0
0