70-663 · Question #97
You have an Exchange Server 2010 organization. The organization contains a global security group named Group1. You plan to deploy a monitoring solution for the Exchange servers in your organization…
The correct answer is D. Role Based Access Control (RBAC). You can restrict/prevent/disallow functionality for selected group by using RBAC. RBAC is not only for giving control it can be used to restrict it. Management role entries on a management role determine what cmdlets and parameters are available on a management role. By…
Question
You have an Exchange Server 2010 organization. The organization contains a global security group named Group1. You plan to deploy a monitoring solution for the Exchange servers in your organization. You need to recommend a solution that allows members of Group1 to monitor the performance of Exchange Server 2010 servers. Your solution must prevent members of Group1 from modifying the configurations of the Exchanges Server 2010 organization. What should you include in the solution?
Exhibit
Options
- ADelegation of Control Wizard
- BFederation Trusts
- CReliability Monitor
- DRole Based Access Control (RBAC)
How the community answered
(40 responses)- A3% (1)
- B10% (4)
- C8% (3)
- D80% (32)
Explanation
You can restrict/prevent/disallow functionality for selected group by using RBAC. RBAC is not only for giving control it can be used to restrict it. Management role entries on a management role determine what cmdlets and parameters are available on a management role. By removing role entries or parameters on a role entry, you can restrict what users assigned the management role can perform. Remove-ManagementRoleEntry "Seattle Server Administrators\Enable-MailUser" To check what Role Enties are assigned to a Management Role use this command:
Topics
Community Discussion
No community discussion yet for this question.