Exam 70-744 topic 1 question 186 discussion

Actual exam question from Microsoft's 70-744

Question #: 186
Topic #: 1

Your network contains an Active Directory domain.
You plan to implement Dynamic Access Control.
You need to create a central access rule that will grant permissions to users who have the Department attribute set to Finance. The users must have access to resources that have the Department property set to Finance.
Which two actions should you perform before you create the central access rule? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Enable a claim type
B. Create a central access policy
C. Create a resource property list
D. Enable a resource property
E. Create a claim type

Show Suggested Answer

Suggested Answer: CE 🗳️
References:
https://docs.microsoft.com/en-us/windows-server/identity/solution-guides/deploy-a-central-access-policy--demonstration-steps-

by Boehlie at April 13, 2020, 11:03 a.m.

Comments

Submit Cancel

Boehlie

Highly Voted 5 years, 1 month ago

The answer should be D&E. There is a default Resource property for department. This can be simply enabled.

upvoted 6 times

...

thattanguyz

Highly Voted 4 years, 8 months ago

Given is correct: C and E. Implement: Configure the components and policy Step: 2.1 - Create claim types step 2.2 - Create resource properties step 2.3 Configure a central access rule --- can read more at: https://docs.microsoft.com/en-us/windows-server/identity/solution-guides/deploy-a-central-access-policy--demonstration-steps-

upvoted 5 times

LeonSKanady

4 years, 7 months ago

You mean D,E ??

upvoted 4 times

...

SamsOtro

Most Recent 4 years, 5 months ago

Agree - Do E first and then D (C would follow). Must do D second as built in resource properties like "Department" must be enabled (all are disabled by default) before you use them (in step C - creating resource property lists).

upvoted 1 times

...

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam