Microsoft 70-411 Question Answer

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
domain have Microsoft Windows Server 2012 R2 installed.
Site.com has a Research department.
A server in the Research department named Site-SR25 runs the File and Storage Services role and the File Server Resource Manager role service. Sensitive
information is stored in shared folders on Site-SR25. You want to be notified by e-mail when an executable file is stored in a shared folder on Site-SR25. The
notification must include information about the user who stored the file and the exact location of the file. What should you do?

A. You should enable Encrypted File System (EFS) on Site-SR25.
B. You should modify the permissions of the shared folders on Site-SR25.
C. You should configure a File Screen Exception on Site-SR25.
D. You should configure a File Screen on Site-SR25.

Answer: D



You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
domain have Microsoft Windows Server 2012 R2 installed.
Site.com has a Research department. All user and computer accounts in the Research department are located in an organizational unit (OU) named ResearchOU.
A server in the Research department named Site-SR23 runs the File and Storage Services role and the File Server Resource Manager role service. Sensitive
information is stored in shared folders on Site-SR23.
All users in the Research department are members of a global security group named ResearchUsers. The ResearchUsers group has full control access to a folder named D:\Data which is shared as \\Site-SR23\Data. You link a group policy object (GPO) to the ResearchOU. The GPO configures the Audit File System and Audit File Share settings to Success and Failure. You need to ensure that all file deletions in \\Site-SR23\Data by members of the ResearchUsers group are logged. You delete a test file in the shared folder and verify that an event log entry is added. You discover that when a user in the ResearchUsers group deletes a file, no event log entry is added.
What should you modify?

A. You should modify the share permissions of \\Site-SR23\Data.
B. You should modify the audit settings in the GPO.
C. You should modify the discretionary access control list (DACL) D:\Data.
D. You should modify the system access control list (SACL) of D:\Data.

Answer: D