350-001 testking,640-802 dumps, and VCP-310

You work as a network administrator for Certifyme.com. The network consists of a
single Active Directory domain named certifyme.com. Certifyme.com contains six
domain controllers of which two each is configured to run Windows Server 2003,
Windows 2000 Server, and Windows NT Server 4.0

The Certifyme.com departments are organized into organizational units (OUs).350-001 As
such the Administration OU is named TK_ADMIN, and the OU is named the
TK_SALES. All file servers for all departments are located in their respective OUs.
The TK_SALES OU is a child OU of the TK_ADMIN OU.

A new Certifyme.com written security policy states that the Administration
department servers must be configured with security settings that are enhanced
from the default settings.640-802
The Certifyme.com written security policy further also
states that the Sales department servers must be configured with security settings
that are enhanced from the default settings, and auditing should be enables for file
and folder deletion.

Your instructions are to plan the security policy settings of the Administration and
Sales departments to ensure compliance with the written security policy.
VCP-310 To this end
you decide to make use of a Group Policy Objects (GPO) for each of these
departments.
Leading the way in IT testing and certification tools, www.certifyme.com
- 16 -

What should you do next?

A. One GPO must apply the Compatws.inf security template to computer objects.
Link this GPO to the TK_ADMIN OU.
The second GPO must enable the Audit object access audit policy on computer
objects.
Link this GPO to the TK_SALES OU.
B. One GPO must apply the Securews.inf security template to computer objects.
Link this GPO to the TK_ADMIN OU.
The second GPO must enable the Audit object access audit policy on computer
objects.
Link this GPO to the TK_SALES OU.
C. One GPO must apply to the Compatws.inf security template to computer objects.
Link this GPO to the TK_ADMIN OU.
The second GPO must apply the Hisecws.inf security template to computer objects.
Link this GPO to the TK_SALES OU.
D. One GPO must apply the Securews.inf security template to computer objects.
Link this GPO to both the TK_ADMIN and the TK_SALES OUs.
The second GPO must enable the Audit object access audit policy on computer
objects.
Link this GPO to the TK_SALES OU.
Answer: B
Explanation: The Securews.inf template contains policy settings that increase the
security on a workstation or member server to a level that remains compatible with
most functions and applications. The template includes many of the same account
and local policy settings as Securedc.inf, and implements digitally signed
communications and greater anonymous user restrictions.

Audit Object Access
A user accesses an operating system element such as a file, folder, or registry key. To
audit elements like these, you must enable this policy and you must enable auditing on
the resource that you want to monitor. For example, to audit user accesses of a particular
file or folder, you display its Properties dialog box with the Security tab active, navigate
to the Auditing tab in the Advanced Security Settings dialog box for that file or folder,
and then add the users or groups whose access to that file or folder you want to audit.

Incorrect Answers:
A, C: The Compatws.inf security template is designed for Windows NT compatible
applications that require lower security settings in order to run. These settings are lower
than the default settings.


Leading the way in IT testing and certification tools, www.certifyme.com
- 17 -

D: The TK_SALES OU is a child OU of the TK_ADMIN OU. GPO settings applied to
parent OUs are inherited by child OUs; therefore we do not need to link the GPO to both
the TK_ADMIN OU and the TK_SALES OU.

Reference:
Craig Zacker, MCSE Self-Paced Training Kit (Exam 70-293): Planning and Maintaining
a Microsoft Windows Server 2003 Network Infrastructure, Microsoft Press, Redmond,
Washington, Chapters 9 and 10