Your network contains an Active Directory domain named adatum.com.
You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The
solution must minimize the amount of SYSVOL replication traffic caused by the audit.
Which two settings should you configure? (Each correct answer presents part of the solution.
Choose two.)
A.
Audit Policy\Audit system events
B.
Advanced Audit Policy Configuration\DS Access
C.
Advanced Audit Policy Configuration\Global Object Access Auditing
D.
Audit Policy\Audit object access
E.
Audit Policy\Audit directory service access
F.
Advanced Audit Policy Configuration\Object Access
Advanced audit is not compatible with basic audit. Advanced\Object+Global Object is the answer.
You are correct.
mina is correct.cf
clues in questions are these:” on all of the domain controllers” , “must minimize the amount of SYSVOL replication traffic” , “Which two settings”
facts:
-never mix advanced audit policy with basic audit policy.so definitely D is the incorrect choice.
-Advanced Audit Policy Configuration\DS Access is for active directory domain services events not file system like sysvol.
-the only setting that need another policy is Global Object Access Auditing.it should be configured with Advanced Audit Policy Configuration\Object Access.
-Since you are not actually changing a file when you use Global Object Access Auditing, you are not going to trigger unnecessary replication with the act of setting up auditing tab in properties of the folders in file servers.you don’t touch the object themselves.
consider these links:
https://blogs.technet.microsoft.com/askds/2011/03/10/global-object-access-auditing-is-magic/
https://www.petri.com/configure-global-object-access-auditing-windows-server
Mina is right about Advanced and basic audit, so ignore the basic audit items. So A, D, & E are out.
That leaves B, C, and F. We need two. Object access includes the file system and Global allows you to set the SACL for the entire computer. So Mina is correct. Here are some links:
Object Access/Audit File share
https://technet.microsoft.com/en-us/library/dn311489.aspx
Global Object Access/File System:
https://technet.microsoft.com/en-us/library/dn319112.aspx
from:
https://issuu.com/tanatanawawasi/docs/current_microsoft_70-411_certificat
CF
Your network contains an Active Directory domain named adatum.com. You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit.
Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)
A. Audit Policy\Audit object access
B. Audit Policy\Audit system events
C. Audit Policy\Audit directory service access
D. Advanced Audit Policy Configuration\Object Access
E. Advanced Audit Policy Configuration\DS Access
F. Advanced Audit Policy Configuration\Global Object Access Auditing
Answer: DF
somone have more experience in this field?
Hello, i think that i noticed you visited my site so i got here to return the want?.I am attempting to in finding issues to improve my site!I assume its adequate to use some of your concepts!!|