What setting does Jerald need to adjust to prevent this same issue from happening again?

Jerald is the systems administrator for his company. Jerald is responsiblefor all servers, workstations, and network security. Based on company policy, every available auditing feature is turned on for the network through Group Policy. Jerald comes in to work one morning and two of his Domain Controllers are completely shut down. Jerald boots the two machines up and checks their event logs. Then Jerald checks the firewall logs to see if anything stands out. From the event and firewall logs, it appears that a hacker was able to gain access to the two servers using an old unused service account that had a weak password. The hacker then was apparently able to generate millions of erroneous events in th e server event logs which caused them to shut down. What setting does Jerald need to adjust to prevent this same issue from happening again?

Jerald is the systems administrator for his company. Jerald is responsiblefor all servers, workstations, and network security. Based on company policy, every available auditing feature is turned on for the network through Group Policy. Jerald comes in to work one morning and two of his Domain Controllers are completely shut down. Jerald boots the two machines up and checks their event logs. Then Jerald checks the firewall logs to see if anything stands out. From the event and firewall logs, it appears that a hacker was able to gain access to the two servers using an old unused service account that had a weak password. The hacker then was apparently able to generate millions of erroneous events in th e server event logs which caused them to shut down. What setting does Jerald need to adjust to prevent this same issue from happening again?

A.
Jerald needs to disable the �Audit: Shut down system immediately if unable to log security audits� setting.

B.
He should enable the �Domain member: Do not shut down system if unable to log events� setting.

C.
To prevent the servers from shutting down in the future, Jerald needs to disable logging on those two Domain Controllers.

D.
Jerald should enable the �Audit: Do not shut down system if events can no longer be logged� setting.



Leave a Reply 0

Your email address will not be published. Required fields are marked *