Exam MD-100 topic 3 question 99 discussion

Actual exam question from Microsoft's MD-100

Question #: 99
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a computer that runs Windows 10. The computer contains a folder. The folder contains sensitive data.
You need to log which user reads the contents of the folder and modifies and deletes files in the folder.
Solution: From the properties of the folder, you configure the Auditing settings and from the Audit Policy in the local Group Policy, you configure Audit privilege use.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by AUP123 at Sept. 19, 2022, 2:40 p.m.

Comments

Submit Cancel

Buruguduystunstugudunstuy

2 years, 3 months ago

Selected Answer: B

No. The proposed solution will only enable auditing of privileged actions such as changing system time or restoring files and folders. To meet the goal, you need to enable object access auditing on the folder containing sensitive data, and then configure the auditing settings to log the desired events (such as read, modify, and delete) for the appropriate user accounts or groups. Once auditing is enabled, the logs can be collected and analyzed to determine who has accessed or modified the files.

upvoted 1 times

...

Hatsapatsa

2 years, 6 months ago

Selected Answer: B

Set 'Audit Object Access' audit policy

upvoted 2 times

...

AUP123

2 years, 9 months ago

This is correct

upvoted 1 times

...