nerdexam
Microsoft

70-642 · Question #25

70-642 Question #25: Real Exam Question with Answer & Explanation

The correct answer is D. In the Registry Editor, add a Security Descriptor Definition Language (SDDL) value.. The Security Descriptor for each log is specified by using Security Descriptor Definition Language (SDDL) syntax. For more information about SDDL syntax, see the Platform SDK, or visit the Microsoft Web site mentioned in the "References" section of this article. To construct an S

Question

Your network contains a server named Server1 that runs Windows Server 2008 R2. You have a user named User1. You need to ensure that User1 can view the events in the Security event log. The solution must minimize the number of rights assigned to User1. What should you do?

Options

  • AIn Event Viewer, filter the Security log.
  • BIn Event Viewer, configure the properties of the Security log.
  • CIn the Local Security Policy console, modify the Security Options.
  • DIn the Registry Editor, add a Security Descriptor Definition Language (SDDL) value.

Explanation

The Security Descriptor for each log is specified by using Security Descriptor Definition Language (SDDL) syntax. For more information about SDDL syntax, see the Platform SDK, or visit the Microsoft Web site mentioned in the "References" section of this article. To construct an SDDL string, note that there are three distinct rights that pertain to event logs: Read, Write, and Clear. These rights correspond to the following bits in the access rights field of the ACE string:

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-642 Practice