70-299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network Online Class

Demo Question 10.

You are a security administrator for EliteCertify.com. The network consists of a single Active Directory domain named EliteCertify.com. All servers run Windows Server 2003. You plan to deploy remote access to the network for users that work from home, including users who are member of a group named EliteCertify Staff. All members of the EliteCertify Staff group are in the Domain Users group. The EliteCertify.com written security policy states the following remote access requirements: 1. Users, except member of the EliteCertify Staff group, are allowed to use remote access at any tome for an unlimited duration. 2. Members of the EliteCertify Staff group are allowed to use remote access during the day only for a maximum of 30 minutes. You configure and enable Routing and Remote Access on a member server named EliteCertify -SR25. You delete the predefined remote access policy. The remote access permission for all user accounts in the domain is set to use remote access policies. Now you need to apply the appropriate Remote Access policies in the correct order so as to comply with the EliteCertify.com written security policy. Following are the Remote Access Policies: 1. Domain Users - Deny - 30 minutes 2. Domain Users - Grant - 30 minutes 3. Domain Users/During day - Grant - Unlimited 4. EliteCertify Staff - Deny - Unlimited 5. EliteCertify Staff/During day - Grant - 30 minutes. You need to make a decision on how to apply these remote access policies. What should you do?

A. You should apply the remote access policies as follows: first - EliteCertify Staff/During day - Grant - 30 minutes second - TestingStaff - Deny - Unlimited third - Domain Users - Grant - 30 minutes
B. You should apply the remote access policies as follows: first - EliteCertify Staff/During day - Grant - 30 minutes second - TestingStaff - Deny - Unlimited third - Domain Users - Deny - 30 minutes
C. You should apply the remote access policies as follows: first - EliteCertify Staff/During day - Grant - 30 minutes second - EliteCertify Staff - Deny - Unlimited third - Domain Users/During day - Grant - Unlimited
D. You should apply the remote access policies as follows: first - Domain Users - Grant - 30 minutes second - CertK tingStaff - Deny - Unlimited third - Domain Users/During day - Grant - Unlimited


Display Answer

Answer: C

Explanation: The remote access polices are tried in order. The more specific remote access policies are placed in order ahead of the more general remote access policies. If the first policy in the ordered list of remote access policies does not match the connection attempt, the next policy is tried.