|
Home > Archive > 70-217 > January 2003 > Deja's Wed 70-217 Question of the Day
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Deja's Wed 70-217 Question of the Day
|
|
| Deja-vue 2003-01-29, 1:19 am |
| And today's Question is:
You are the administrator for Arbor Shoes. Administrative control of Active Directory has been delegated to several people in the company. You need to track changes made to the arborshoescom domain. To ensure accountability of the other administrators' actions, you want to monitor user and computer account creation and deletion.
What should you do?
A. Modify the default Group Policy object (GPO) on the arborshoes.com domain. Configure the local audit policy to audit account management and directory services access for success and failure. Monitor the security logs for activity on the domain controllers.
B. Modify the default Group Policy object (GPO) on the Domain Controllers organizational unit (OU). Configure the local audit policy to audit account management and directory services access for success and failure. Monitor the security logs for activity on the domain controllers.
C. Modify the default Group Policy object (GPO) on the Domain Controllers organizational unit (OU). Configure the local audit policy to audit account logon events and object access for success and failure. Monitor the security logs for activity on the domain controllers.
D. Modify the default Group Policy object (GPO) on the arborshoes.com domain. Configure the local audit policy to audit account logon events and object access for success and failure. Monitor the security logs for activity on the domain controllers.
hmmm, not that easy?
We'll see you all tomorrow!
 | |
| B4yaman3 2003-01-29, 11:48 am |
| First...I am going with A..hope I get it..  | |
| me? I dunno... 2003-01-29, 11:46 pm |
| I'll try 'A' also. | |
| Deja-vue 2003-01-30, 12:15 am |
| quote: Originally posted by Deja-vue
And today's Question is:
You are the administrator for Arbor Shoes. Administrative control of Active Directory has been delegated to several people in the company. You need to track changes made to the arborshoescom domain. To ensure accountability of the other administrators' actions, you want to monitor user and computer account creation and deletion.
What should you do?
A. Modify the default Group Policy object (GPO) on the arborshoes.com domain. Configure the local audit policy to audit account management and directory services access for success and failure. Monitor the security logs for activity on the domain controllers.
B. Modify the default Group Policy object (GPO) on the Domain Controllers organizational unit (OU). Configure the local audit policy to audit account management and directory services access for success and failure. Monitor the security logs for activity on the domain controllers.
C. Modify the default Group Policy object (GPO) on the Domain Controllers organizational unit (OU). Configure the local audit policy to audit account logon events and object access for success and failure. Monitor the security logs for activity on the domain controllers.
D. Modify the default Group Policy object (GPO) on the arborshoes.com domain. Configure the local audit policy to audit account logon events and object access for success and failure. Monitor the security logs for activity on the domain controllers.
hmmm, not that easy?
We'll see you all tomorrow!
Sorry, the Answer was B.
Account Management and Directory Services access will track changes in user/computer account creation and deletion. |
|
|
|
|