Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1 that runs Windows Server 2012. You view the effective policy settings of Server1 as shown in
the exhibit. On Server1, you have a folder named C:\Share1 that is shared as Share1. Share1 contains
confidential data. A group named Group1 has full control of the content in Share1. You need to ensure that an
entry is added to the event log whenever a member of Group1 deletes a file in Share1. What should you
configure?
A.
The Audit File System setting of Servers GPO
B.
The Sharing settings of C:\Share1
C.
The Security settings of C:\Share1
D.
The Audit File Share setting of Servers GPO
http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx
A?
Confirmation on this? The question and answers given don’t correlate with the TechNet article.
The answer is correct. The GPO must be have Audit Enable and it clearly shows on the exhibit. Next the Audit has to be enable on the server share. This can be accomplished by using the Security Setting, Advanced, then from the tabs, click on Auditing and configure what you want to Audit there.
Answer is C
http://blogs.technet.com/b/mspfe/archive/2013/08/27/auditing-file-access-on-file-servers.aspx
Correct answer is C
Click Security Settings and Advanced options;
then TAB Auditing