350-001 testking,640-802 Braindumps and VCP-310

Leading the way in IT testing and certification tools, www.certifyme.com
- 47 -

You work as the network administrator for Certifyme.com. The Certifyme.com
network consists of a single Active Directory domain named certifyme.com. All
application servers in certifyme.com are configured with Microsoft Windows Server
2003.

At present users can access the application servers from the Certifyme.com network
as well as the Internet.

350-001 The network design requires that the application servers
must have specifically configured security settings, including the password policy,
audit policies, and security options settings.640-802 You create a security template named
App.inf that contains the security settings required by the network design.

There is a concern that unauthorized users will modify the configuration to gain
access to the application servers. To this end you want to capture any changes made
to the security settings of the application servers.

You need to generate a report that compares the current settings of each application
server with the required settings on a daily basis.

What should you do?

A. Run secedit command in analysis mode with the App.inf template using a Group
Policy startup script.
Set the Group Policy refresh interval for computers to 24 hours.
B. Import the App.inf template into Group Policy.
Set the Group Policy refresh interval for computers to 24 hours.
C. Run the gpresult command in verbose mode every 24 hours using Task Scheduler.
D. Run the secedit command in analysis mode with the App.inf template every 24 hours
using a custom script in Task Scheduler.
Answer: D
Explanation: Secedit.exe is a command line version of the Security Configuration
and Analysis tool. In 'analysis' mode, this tool can be used to compare the current
system settings with the required settings.
VCP-310 We can use the Task Scheduler to run a
script that runs secedit.exe to analyze the current settings.

Incorrect Answers:
A: A Group Policy startup script will only run when the computer starts up. It does not
run every time the group policy is refreshed.
B: This will reapply the required settings every 24 hours, but the question states that you
want to capture any changes by comparing the current settings to the required settings.
Leading the way in IT testing and certification tools, www.certifyme.com
- 48 -

C: The gpresult utility is a command line version of the RSoP utility. In verbose mode, it
will list the effective policies on a computer. However, it won't list the differences
between the current settings and the required settings.

Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam
70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003
Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, p. 10:44