Passed 70-215

Yay! Finally took my 2nd exam, 70-215 and passed with a score of 895, which
wasn't as good as my 70-210 but still not bad. Although I'm not to sure what
the max score is though, anyone know?

Not to happy about the test centre though, the PC next to me had a faling
hard disk, and throughout the 3hr exam all I could hear was 'clunk' 'grind'
'clunk' very annoying and distracting.

One question I was a bit unsure on was along the lines of :

You have a server with a share called accounts you give the following
permissions
Share: everyone - full control
NTFS: finance dept - full control

The share has confidential data. You want to see who is atempting to access
the share without permission, do you:

a: enable auditing for successful read/writes on the everyone group
b: enable auditing for successful read/writes on the finance group
c: enable auditing for failed read/writes on the everyone group
d: enable auditing for failed read/writes on the finance group

The only answer I can see would be any use would be a: but to me the
'correct' answer is secret answer e: remove the everyone group so only
finance has access if it's such a confidential share!

--
Ben

IT Professional, MCP 70-210, 70-215
"On my way to becoming fully certifiable!"

"The internet - where men are men, women are men and children are FBI
agents."

Darrick
Fri Oct 29 18:18:52 CDT 2004

The answer is simple. I hope I got it right (:-{)

The answer is -c-. When you combine share, and NTFS permissions the most
restrictive permission is applied. In this scenario only the group, finance
dept will be able to access the share, because it's the only object on the
ACL of the *folder*. Any access attempts by users that aren't members of
the finance dept will prompt an access denied error.

Because you want to monitor failed attempts by anyone(everyone), I chose -c-
since you want to monitor users who don't have permission to the share.

MCP 70-210 January 5, 2004

Studying for my 70-215

"Ben" <bjblackmore@nospam.hotmail.com> wrote in message
news:u%23nIAd4tEHA.3872@TK2MSFTNGP15.phx.gbl...
> Yay! Finally took my 2nd exam, 70-215 and passed with a score of 895,
> which
> wasn't as good as my 70-210 but still not bad. Although I'm not to sure
> what
> the max score is though, anyone know?
>
> Not to happy about the test centre though, the PC next to me had a faling
> hard disk, and throughout the 3hr exam all I could hear was 'clunk'
> 'grind'
> 'clunk' very annoying and distracting.
>
> One question I was a bit unsure on was along the lines of :
>
> You have a server with a share called accounts you give the following
> permissions
> Share: everyone - full control
> NTFS: finance dept - full control
>
> The share has confidential data. You want to see who is atempting to
> access
> the share without permission, do you:
>
> a: enable auditing for successful read/writes on the everyone group
> b: enable auditing for successful read/writes on the finance group
> c: enable auditing for failed read/writes on the everyone group
> d: enable auditing for failed read/writes on the finance group
>
> The only answer I can see would be any use would be a: but to me the
> 'correct' answer is secret answer e: remove the everyone group so only
> finance has access if it's such a confidential share!
>
> --
> Ben
>
> IT Professional, MCP 70-210, 70-215
> "On my way to becoming fully certifiable!"
>
> "The internet - where men are men, women are men and children are FBI
> agents."
>
>