nerdexam
CompTIA

CV0-002 · Question #451

A new service request asks for all members of the finance department to have access to the accounting department's file server VMs on the private cloud environment. Which of the following is the MOST

The correct answer is A. Set up duplicate file server VMs that the finance department has access to and enable two-way replication.. The most efficient way to grant the finance department access to accounting's file server VMs while maintaining data consistency is to set up duplicate VMs and enable two-way replication.

Security

Question

A new service request asks for all members of the finance department to have access to the accounting department's file server VMs on the private cloud environment. Which of the following is the MOST efficient way to fulfill this service request?

Options

  • ASet up duplicate file server VMs that the finance department has access to and enable two-way replication.
  • BAdd all users of the finance department to the accounting departments file server VMs access lists.
  • CImplement a single sign-on and two-factor authentication solution using a soft token.
  • DCreate a new group for the finance department that will allow access to the accounting department's file

How the community answered

(48 responses)
  • A
    90% (43)
  • B
    2% (1)
  • C
    6% (3)
  • D
    2% (1)

Why each option

The most efficient way to grant the finance department access to accounting's file server VMs while maintaining data consistency is to set up duplicate VMs and enable two-way replication.

ASet up duplicate file server VMs that the finance department has access to and enable two-way replication.Correct

Setting up duplicate file server VMs with two-way replication ensures that both departments have their own access control domains while keeping the data synchronized. This is efficient because it avoids direct modification of an existing department's security configuration, reduces potential for human error in managing individual user access across departments, and ensures data consistency with minimal administrative overhead once configured, especially in a private cloud environment.

BAdd all users of the finance department to the accounting departments file server VMs access lists.

Adding individual users from the finance department to the accounting department's access lists is inefficient and prone to errors, especially as departments grow or change.

CImplement a single sign-on and two-factor authentication solution using a soft token.

Implementing single sign-on (SSO) and two-factor authentication (2FA) is a security enhancement for user authentication, but it does not directly address the specific file access permission request between departments.

DCreate a new group for the finance department that will allow access to the accounting department's file

Creating a new group for the finance department to allow access to the accounting department's file server VMs would grant them direct access to the existing accounting VM's resources, which might not be desirable due to security, auditing, or operational separation concerns between departments, making replication a more efficient solution for departmental independence.

Concept tested: Efficient file server access and data synchronization in private cloud

Source: https://learn.microsoft.com/en-us/windows-server/storage/dfs-replication/dfs-replication-overview

Topics

#Access control#Group-based permissions#File server access#Identity and Access Management (IAM)

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice