Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2).
You enable auditing for failed logon attempts on all domain controllers.
You need to ensure that a record of failed logon attempts is retained for 90 days on all domain controllers.
What should you do?（）

Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
The domain includes two global groups named ResearchManagers and ResearchUsers.
You create a share named ResearchData. On the ResearchData share, you assign the Change
permission to ResearchUsers and ResearchManagers.
The ResearchData folder contains a file named ResearchConfidential.rtf. The permissions for
ResearchConfidential.rtf are configured as shown in the exhibit. (Click the Exhibit button.)

Members of ResearchUsers report that when they try to open ResearchConfidential.rtf, they receive an
access denied message. Users report that they can add and modify other files in ResearchData.
You need to ensure that ResearchUsers members can open ResearchConfidential.rtf. The solution must
prevent ResearchUsers members from modifying the file.
What should you do?（）

Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
You create a folder named CorporateData. You share the folder as CorpData and assign the Change
permission to the Domain Users group.
In the CorporateData folder, you create a folder named HumanResources. On the HumanResources
folder, you assign the Modify permission to a global group named HRUsers. You share the
HumanResources folder as HRData.
You confirm that all users in the domain can view the files in the HRData share.
You need to ensure that only HRUsers and administrators can access files in the HRData share. The
solution must maintain user access to the CorpData share.
What should you do? （）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). The primary group for all users is Domain Users.
You share a folder named Data. The shared folder is located on a server named Server1.
A user in the Research group named User1 reports that she cannot access files in the Data shared folder.
You verify that User1 is not listed in the access control list of the shared folder.
You examine the properties of the User1 account. The properties are shown in the exhibit. (Click the
Exhibit button.)

Other members of the Research group can add and modify files in the Data shared folder.
You need to ensure that User1 can access files in the Data shared folder.
What should you do? （）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2).
You have two global groups named Research and ResearchManagers. The Research group contains all
users in a department named Research. The ResearchManagers group contains all managers in the
Research department. All members of the ResearchManagers group are members of the Research
group.
You create a shared folder named Research. The permissions for the Research share are shown in the
exhibit. (Click the Exhibit button.)

You need to modify the share permissions to ensure that only members of the ResearchManagers group
can add and modify files over the network.
What should you do? （）

Your network consists of a single Active Directory domain. All network servers run Windows Server
2003 Service Pack 2 (SP2).
You share a folder named Research. A user named User1 reports that he cannot access files in the
Research share.
You confirm that the Domain Users group is granted the Change permission for the Research share.
You run the Cacls command as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that User1 can modify files in the Research share. You must prevent User1 from
modifying permissions for the Research folder.
To which group should you add User1? （）

Your network consists of a single Active Directory domain. The domain includes a group named
SalesUsers.
You have a file server that runs Windows Server 2003 Service Pack 2 (SP2).
The server has a folder named CorpData. You share the CorpData folder and assign the Domain Users
group the Full Control share permission.
In the CorpData folder, you create a folder named Sales.
You need to configure security for the Sales folder to meet the following requirements:
·Members of the SalesUsers group must be able to read, create, and modify all files and folders.
·All other users must be able to view items in the folder.
What should you do? （）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You assign NTFS permissions to a folder on a file server as shown in the following table.

You share the folder and assign the Change permission to the Everyone group.
A user named User1 is a member of Group1, Group2, and Group3.
You need to identify the least restrictive NTFS permission that User1 has when he accesses the folder
over the network.
Which permission should you identify? （）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
On a file server, you have a shared folder named Data. The Data folder has the permissions shown in the following table.

You need to ensure that members of a group named Sales can modify content in the Data share. Sales group members must only be allowed to delete files that they create.
Which additional permission should you assign to the Sales group?（）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003
Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You have a user account named User1.
You need to identify which permissions User1 has on a file.
What should you do? （）

Your network consists of a single Active Directory domain. You have a terminal server that runs
Windows Server 2003 Service Pack 2 (SP2).
You need to prevent users from establishing multiple Remote Desktop connections to the server.
What should you do?（）