70-350 Implementing Microsoft Internet Security and Acceleration (ISA) Server 2004 Practice Exams

Demo Question 2.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com network recently deployed an ISA server named EliteCertify -SR01 used to control Internet access both outbound and inbound. You decided to configure and define the intrusion detection alert in the form of an e-mail when five or more incidents of intrusions are detected by the ISA server. You are required to configure the alert in such a way that the e-mail is sent to you and need to select which options to use. What should you do?

A. The Report to Windows event log option should be selected on the Actions tab of the Intrusion detected Properties dialog box and enable e-mail forwarding in the Windows Event Viewer.
B. The Run a program option should be selected on the Actions tab of the Intrusion detected Properties dialog box and choose the e-mail service to be launched.
C. The Run a program option should be selected on the Actions tab of the Intrusion detected Properties dialog box and choose a batch file to send the mail to the SMTP service.
D. The Send e-mail option should be selected on the Actions tab of the Intrusion detected Properties dialog box.


Display Answer

Answer: D

Explanation: In the scenario you best choice is to select the send e-mail option on the Actions tab of the Intrusion detected Properties dialog box because Intrusion detection is a feature of ISA which is used to detect when an attack against the server is made. Incorrect