CertNexus Exam CFR-410 Topic 8 Question 24 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 24
Topic #: 8

According to company policy, all accounts with administrator privileges should have suffix _j

a. While reviewing Windows workstation configurations, a security administrator discovers an account without the suffix in the administrator's group. Which of the following actions should the security administrator take?

AReview the system log on the affected workstation.

BReview the security log on a domain controller.

CReview the system log on a domain controller.

DReview the security log on the affected workstation.

Show Suggested Answer

Suggested Answer: A, B

by Golda at Nov 21, 2023, 10:05 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Reena

14 days ago

This question is a real 'suffix-cation' of my security knowledge! I better choose wisely or I'll be in the 'admin-istrative' doghouse.

upvoted 0 times

...

Floyd

17 days ago

I'm going to review the security log on the domain controller. That's where I'll find the most relevant information about this policy violation.

upvoted 0 times

...

Janella

18 days ago

Wait, why would I review the system log on a domain controller? Shouldn't I be looking at the security log on the affected workstation to find out what's going on?

upvoted 0 times

...

Hester

1 months ago

Hmm, the security log on the affected workstation might give me some clues about how this account ended up without the required suffix. I'll go with option D.

upvoted 0 times

Alesia

4 days ago

I think reviewing the system log on the affected workstation could also provide some insights. Option A might be worth considering.

upvoted 0 times

...

Tish

8 days ago

I agree, checking the security log on the affected workstation is a good idea. Let's go with option D.

upvoted 0 times

...

2 months ago

I think the security administrator should review the security log on the affected workstation.

upvoted 0 times

...