You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Research department. All user and computer accounts in the Research
department are located in an organizational unit (OU) named ResearchOU.
A server in the Research department named TESTKING-SR23 runs the File and Storage Services
role and the File Server Resource Manager role service. Sensitive information is stored in shared
folders on TESTKING-SR23.
All users in the Research department are members of a global security group named
ResearchUsers.
The ResearchUsers group has full control access to a folder named D:\Data which is shared as
\\TESTKING-SR23\Data.
You link a group policy object (GPO) to the ResearchOU. The GPO configures the Audit File
System and Audit File Share settings to Success and Failure.
You need to ensure that all file deletions in \\TESTKING-SR23\Data by members of the
ResearchUsers group are logged.
You delete a test file in the shared folder and verify that an event log entry is added.
You discover that when a user in the ResearchUsers group deletes a file, no event log entry is
added.
What should you modify?
A.
You should modify the share permissions of \\TESTKING-SR23\Data.
B.
You should modify the audit settings in the GPO.
C.
You should modify the discretionary access control list (DACL) D:\Data.
D.
You should modify the system access control list (SACL) of D:\Data.