Exam 70-744 topic 2 question 13 discussion

Actual exam question from Microsoft's 70-744

Question #: 13
Topic #: 2

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You deploy the Advanced Threat Analytics (ATA) Gateway to Server1.
You plan to collect events from the domain controllers by using a source-initiated configuration.
You need to configure security to allow Server1 to collect the events.
What should you do?

A. Add the Contoso\Domain Controllers account to the Contoso\Event Log Readers group.
B. Add the Network Service account to the Server1\Event Log Readers group.
C. Add the Network Service account to the Contoso\Event Log Readers group.
D. Add the Contoso\Domain Controllers account to the Server1\Event Log Readers group.

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://docs.microsoft.com/en-us/advanced-threat-analytics/configure-event-collection

by KidCastaldo at Oct. 31, 2020, 8:58 p.m.

Comments

Submit Cancel

SamsOtro

4 years, 5 months ago

C is correct, the Network Service account gets added in AD to the domain Event Log Readers Group - is leveraged as part of subscription/forwarding of events to Gateway.

upvoted 1 times

...

KidCastaldo

4 years, 6 months ago

Reference supports given answer

upvoted 1 times

...

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 2 question 13 discussion

Comments

SamsOtro

KidCastaldo

SY0-701