nerdexam
Microsoft

70-647 · Question #245

You are evaluating implementing a solution for the internal auditors. You need to recommend a solution to delegate the appropriate rights to the auditors. What should you include in the…

The correct answer is C. Restricted Groups. Blue yonder Airlines COMPANY OVERVIEW Blue Yonder Airlines has a main office and four branch offices. Blue Yonder Airlines plans to implement the following changes: - Upgrade all client computers to Windows 7. - Deploy a virtualization solution for the company's developers…

Planning and Implementing Security

Question

You are evaluating implementing a solution for the internal auditors. You need to recommend a solution to delegate the appropriate rights to the auditors. What should you include in the recommendation?

Exhibit

70-647 question #245 exhibit

Options

  • Aaccess-based enumeration (ABE)
  • BActive Directory delegation
  • CRestricted Groups
  • Dselective authentication

How the community answered

(59 responses)
  • A
    3% (2)
  • B
    5% (3)
  • C
    78% (46)
  • D
    14% (8)

Explanation

Blue yonder Airlines COMPANY OVERVIEW Blue Yonder Airlines has a main office and four branch offices. Blue Yonder Airlines plans to implement the following changes: - Upgrade all client computers to Windows 7. - Deploy a virtualization solution for the company's developers. - Implement coexistence between the users in Fabrikam and the users in Blue Yonder Airlines. EXISTING ENVIRONMENT One user in each office runs a point-of-sale (POS) application named Appl. App 1 requires access to a local USB device and only runs on Windows XP Service Pack 3 (SP3). Blue Yonder Airlines has a finance department. Blue Yonder Airlines plans to acquire a company named Fabrikam, Inc. Fabrikam has an Active Directory forest named fabrikam.com. Fabrikam.com contains only domain controllers that run Windows Server 2003 Service Pack 2 (SP2). Fabrikam.com contains multiple Web servers that are secured by using certificates. All server certificates are issued by the internal CA of Fabrikam. Existing Active Directory Environment The network contains an Active Directory forest named blueyonderairlines.com. The forest contains a single domain. The domain contains domain controllers that run Windows Server 2008. The domain controllers are configured as shown in the following table. The forest contains a single Active Directory site. A subnet object is defined for each office. The forest contains a certification authority (CA). Existing Network Infrastructure Each office has a file server and a print server. The main office has a file server named Server1. The shared folders on Server1 are configured as shown in the following table. Blueyonderairlines.com has a standalone DFS root named \serverl\corp that contains a link named sales. Replicas of \serverl\corp\sales are deployed in each office. Current Administration Model Administrators manage the Active Directory objects by using the Active Directory module for Windows Power Shell. TECHNICAL REQUIREMENTS Blue Yonder Airlines must meet the following requirements for coexistence between Blue Yonder Airlines and Fabrikam: - Only specific users in Fabrikam must be allowed to access specific shares in blueyonderairlines.com. - Users in Blue Yonder Airlines must be able to access the secure Web servers in fabrikam.com without receiving a warning message about the - All administrators in Blue Yonder Airlines must be able to administer Active Directory objects in fabrikam.com by using their default administrative tools. The corporate security policy states that when a domain controller fails, all references to the domain controller must be permanently removed from the domain before the domain controller is Blue Yonder Airlines must meet the following virtualization requirements: - Ensure that each developer can create and manage his own virtual - Prevent the developers from configuring the settings of other developers' VMs. - Prevent the developers from creating VMs that use more than 2 GB of - Minimize the amount of bandwidth used when users access files over

Topics

#Restricted Groups#Active Directory delegation#auditor access#least privilege

Community Discussion

No community discussion yet for this question.

Full 70-647 Practice