6.you are the network administrator for your company. the network consists of a single active directory domain.
you add a windows server 2003 computer to the domain. this server is used to store critical business applications and confidential data. you create several local accounts on the server to manage the applications.
some users report that they are having difficulty accessing an application that is stored on the server. the application uses local accounts.
you need to enable auditing to track all attempts to access the server through a local account in order to gather more information. you must not track more data than is necessary.
what should you do?
to answer, drag the appropriate setting or settings to the correct policy or policies in the work area.
answer:
7.you are the network administrator for your company. the network consists of a single active directory domain. all servers run windows server 2003.
all company data is stored in shared folders on network file servers. the data for each department is stored in a departmental shared folder. users in each department are members of the departmental global group. each departmental global group is assigned the allow - full control permission for the corresponding departmental shared folder.
company requirements state that all access to shared folders must be configured by using global groups.
a user named richard works in the sales department. richard needs to be able to modify files in the marketing shared folder.
you need to ensure that richard has the minimum permissions for the marketing shared folder that he needs to do his job. you need to achieve this goal while meeting company requirements and without granting unnecessary permissions.
what should you do?
a. add richard’s user account to the marketing global group.
b. assign the sales global group the allow - change permission for the marketing shared folder.
c. create a new global group. add richard’s user account to the group. assign the new global group the allow - change permission for the marketing shared folder.
d. assign richard’s user account the allow - change permission for the marketing shared folder.
answer: c
8.you are the network administrator for your company. the network consists of a single active directory domain. all servers run windows server 2003. a network file server contains a folder named corpdata. the file structure is shown in the exhibit. (click the exhibit button.)
all users are members of the domain users global group. users in the sales department are members of a global group named sales. all users access shared folders only by using mapped drives.
users in the engineering, marketing, and sales departments need to be able to view documents that are in any of the folders in corpdata. users in the sales department need to be able to modify only the documents in the salesdata shared folder.
the ntfs permissions for all folders are configured to assign the allow - full control permission to the domain users global group.
you need to configure the appropriate share permissions. you need to achieve this goal by using the minimum amount of administrative effort.
which two actions should you perform? (each correct answer presents part of the solution. choose two.)
a. assign the sales global group the allow - read permission for both the engineeringdata share and the [1] [2] 下一页 |
试题中心
:点击留言