70-350 Implementing Microsoft Internet Security and Acceleration (ISA) Server 2004 Practice Tests

Demo Question 4.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com network recently deployed an ISA server named EliteCertify -SR01 used to control Internet access and the network also deployed a SMTP server named EliteCertify -SR02 and a DNS server named EliteCertify -SR03. You recently created a DNS intrusion alert that will detect host name overflow and zone transfer attacks. You additionally configured the actions below if a DNS intrusion is detected: 1. Send e-mail to admin@ EliteCertify.com. 2. Run a program named tkDNSAlert.cmd. 3. Write the event to the Windows event log. During the course of the day you discover that when a DNS intrusion is detected the event was written to the Windows event log and the e-mail was sent to the specified e-mail account but the tkDNSAlert.cmd program did not execute. You run the batch separately and it works fine. You verify that the user account and validated the account under whose security context the tkDNSAlert.cmd program executes. You also ensure the program has the log on as a batch job right. You are required to ensure the tkDNSAlert.cmd program runs. What should you do?

A. A System Policy rule must be defined to allow the Local Host network to access the folder in which the tkDNSAlert.cmd program resides.
B. A Firewall access rule should be enabled to allow the Local Host network to access the folder in which the tkDNSAlert.cmd program resides.
C. The user account should be granted the Allow Full Control permission for the folder in which the tkDNSAlert.cmd program resides.
D. The password of the user account under whose security context the tkDNSAlert.cmd program runs should be reconfigured.


Display Answer

Answer: D

Explanation: In the scenario you should remember that you are required to reconfigure the password of the account in question if the program does not run and it has the Log on as batch job right assigned. Incorrect