HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 and a server named Server1. Both servers run
Windows Server 2012 R2.
You configure the classification of a share on Server1 as shown in the Share1 Properties
exhibit. (Click the Exhibit button.)
You configure the resource properties in Active Directory as shown in the Resource
Properties exhibit. (Click the Exhibit button.)
You need to ensure that the Impact classification can be assigned to Share1 immediately.
Which cmdlet should you run on each server?
To answer, select the appropriate cmdlet for each server in the answer area.
-enabled
https://technet.microsoft.com/en-us/library/hh852274.aspx
https://technet.microsoft.com/en-us/library/jj900657.aspx
@bobsmith
“Department” is already enabled….
Sorry, bobsmith is right, they are asking about “Impact” classification”….
Answer seems correct to me
Not understanding this question. Appears to be a very vague question.
I would say that correct answers are :
Add-ResourcePropertyListMember
Update-FsrmClassificationPropertyDefinition
Add-ResourcePropertyListMember – Adds one or more resource properties to a resource property list in Active Directory , because :
Each resource property must be added to at least one resource property list. It will then be downloaded by file servers in your environment. The global resource property list is downloaded by all file servers.
Update-FsrmClassificationPropertyDefinition – The Update-FsrmClassificationPropertyDefinition cmdlet synchronizes the classification property definitions on the server with the Resource property definitions in Active Directory Domain Service (AD DS).
More info : http://blogs.technet.com/b/canitpro/archive/2013/05/07/step-by-step-protecting-your-information-with-dynamic-access-control.aspx
http://www.frickelsoft.net/blog/?p=295
Set-ADResourceProperty is the correct answer as you need to run this to enable the resource property first, it is disabled as shown in the screenshot.
@Pavan, the resource propertie is already enabled correct answer is
Add-ResourcePropertyListMember
Update-FsrmClassificationPropertyDefinition
Agree with Luis based on this link. Disabled icon vs enabled.
http://theithollow.com/2014/04/28/microsoft-dynamic-access-control-part-3-resource-properties/
Nein, Pavan is correct, the impact classification along with everything other than department are disabled. You are misreading your own references
I dont understand why DC1 is used in the first command, as the share 1 is in server 1.
I know what you mean, but the RMS is all done on DC side. So I think MS is trying to divide the two actions to demonstrate what you need to do.
i dont get why there is an argument over this , the impact classification is clearly disabled
i dont get why there is an argument over this , the impact classification is clearly disabled answer provided is correct
just tested in lab even though i read that i needed to add the property to a resource list for it to be available for classification. When i enabled the impact classification it was available on the file share.Auto added to global list, Answer is Set-adresourceproperty