Your network contains an Active Directory domain named adatum.com.
You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The
solution must minimize the amount of SYSVOL replication traffic caused by the audit.
Which two settings should you configure? (Each correct answer presents part of the solution.
Choose two.)
A.
Audit Policy\Audit system events
B.
Advanced Audit Policy Configuration\DS Access
C.
Advanced Audit Policy Configuration\Global Object Access Auditing
D.
Audit Policy\Audit object access
E.
Audit Policy\Audit directory service access
F.
Advanced Audit Policy Configuration\Object Access
Standard audit policy settings and advanced audit policy settings shouldn’t be combined, so the answer isn’t correct. Configuring Global Object Access Auditing and Object Access will enable the audiditing of the file system and apply it to all file system objects without the need to specify security ACLs on the security descriptor of the desired objects (hence limiting the replication traffic).
0
0
The correct answer is C,F .
D policies can’t be combined with F policies.
Anyway, this is not a “real life” solution for sysvol monitoring.
0
0
C+F is the best option.
0
0