You need to design an access control strategy to prevent unauthorized users from
modifying the registry on the DNS servers.
What should you do?
A. Change the RestrictAnonymous registry subkey from 0 to 1 or 2.
B. Ensure that DNS1 and DNS2 have to correct permissions set on the WINREG subkey
for all groups.
C. Create a Domain Local group and add unauthorized users in this group on DNS1 and
DNS2.
D. Remove the Domain Users group from the Remote Desktop users group on DNS1 and
DNS2.
Answer: B
Explanation: The WINREG subkey controls the users and groups that can connect
remotely to the computer and modify its registry settings.350-001 If the key has been deleted then
all users can connect remotely and modify the registry settings. By default the
Administrators group has Allow-Full Control permission for this subkey. The Backup
Operators group has Allow-Read permission. This is what is required for the proper
administration of the server.
1. We need to ensure that both DNS1 and DNS2 are protected against this accidental
modification.
Leading the way in IT testing and certification tools, www.certifyme.com
- 59 -
2. I want to see only administrators able to remotely connect to DNS1 and DNS2 to
modify the registry settings.
3. I also want to have the ability to detect all attempts to log on interactively to either of
these servers."
Incorrect answers:
A: The RestrictAnonymous registry subkey is used to restrict anonymous users from
displaying lists of users and their security permissions on the computer.640-802 This setting
whether set to 1 or 2; will not affect the ability to connect remotely to a computer to
modify its registry.
C: In AGDLP, the recommended way to assign permissions to a resource, user accounts
are added to global groups, and then global groups are added to Domain Local groups.
Permissions or user rights assignments are finally assigned to the Domain Local group.
Regardless: in this scenario you want to prevent unauthorized users from modifying the
registry. Thus this option is incorrect.
D: The Remote Desktop Users group is able to create Remote Desktop connections to the
local computer.VCP-310 Usually this group is not populated and members of the local
Administrators group can access the computer via Remote Desktop connection. It is
mentioned in the case study:
1. DNS1 and DNS2 are both configured with the default remote Desktop connection
settings.
Thus the Domain Users group is not a default member of the Remote Desktop Users
group. This option is thus not correct.
Reference:
Elias N. Khnaser, Susan Snedak, Chris Peiris & Rob Amini, MCSE Designing Security
for a Windows Server 2003 Network Exam 70-298 Study Guide, Chapter 8, p. 454
Thursday, June 26, 2008
Tuesday, June 24, 2008
Seebeyond Exam SQ0-101
There are many online resources for preparing for the SQ0-101 exam - e*Gate 4.5 Associate Developer. Read below to discover why CertifyMe is your premier source for practice tests, and true testing environment. Nothing will prepare you for your next exam like a Certify Me. You find it all here at CertifyMe.com.
Your reasons for selecting the leader in online certification preparation - CertifyMe.
SQ0-101 Downloadable, Printable Exams (in CertifyMe iPad format):
We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. SQ0-101 Our Exam SQ0-101 Preparation Material provides you everything you will need to take a certification examination. Details are researched and produced by Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. SQ0-101 Exam
Exam SQ0-101 Preparation from CertifyMe include:
* Comprehensive questions with complete details
* Questions accompanied by exhibits
* Verified Answers Researched by Industry Experts
* Drag and Drop questions as experienced in the Actual Exams
* Questions updated on regular basis
* These questions and answers are backed by our GUARANTEE.
* Like actual certification exams our product is in multiple-choice questions (MCQs).
Two features to our SQ0-101 Testing Engine is Practice and Virtual modes:
* Practice mode allows you to take the exam with answers at the ready.
* Virtual mode keeps score and times your performance - as if you were at a PROMETRIC or VUE testing center.
Our SQ0-101 practice exams and study questions are composed by current and active Information Technology experts, who use their experience in preparing you for your future in IT.
Commitment to Your Success:
At CertifyMe we are committed to you ongoing success. Our exams and questions are constantly being updated and compared to industry standards. SQ0-101 braindump
You are not about to purchase a disposable product. SQ0-101 practice exam updates are supplied free of charge. Testking SQ0-101 Regardless of how soon you decide to take the actual SQ0-101 examination certification, you will be able to walk into the testing room as confident as the Certification Administrator.
Your reasons for selecting the leader in online certification preparation - CertifyMe.
SQ0-101 Downloadable, Printable Exams (in CertifyMe iPad format):
We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. SQ0-101 Our Exam SQ0-101 Preparation Material provides you everything you will need to take a certification examination. Details are researched and produced by Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. SQ0-101 Exam
Exam SQ0-101 Preparation from CertifyMe include:
* Comprehensive questions with complete details
* Questions accompanied by exhibits
* Verified Answers Researched by Industry Experts
* Drag and Drop questions as experienced in the Actual Exams
* Questions updated on regular basis
* These questions and answers are backed by our GUARANTEE.
* Like actual certification exams our product is in multiple-choice questions (MCQs).
Two features to our SQ0-101 Testing Engine is Practice and Virtual modes:
* Practice mode allows you to take the exam with answers at the ready.
* Virtual mode keeps score and times your performance - as if you were at a PROMETRIC or VUE testing center.
Our SQ0-101 practice exams and study questions are composed by current and active Information Technology experts, who use their experience in preparing you for your future in IT.
Commitment to Your Success:
At CertifyMe we are committed to you ongoing success. Our exams and questions are constantly being updated and compared to industry standards. SQ0-101 braindump
You are not about to purchase a disposable product. SQ0-101 practice exam updates are supplied free of charge. Testking SQ0-101 Regardless of how soon you decide to take the actual SQ0-101 examination certification, you will be able to walk into the testing room as confident as the Certification Administrator.
Subscribe to:
Posts (Atom)