Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft AZ-800 Exam - Topic 4 Question 29 Discussion

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.You need to ensure that if an attacker compromises the computer account of RODC1, the attacker cannot view the Employee-Number AD DS attribute. Which partition should you modify?
D) schema
A) configuration
B) global catalog
C) domain

Microsoft AZ-800 Exam - Topic 4 Question 29 Discussion

Actual exam question for Microsoft's AZ-800 exam
Question #: 29
Topic #: 4
[All AZ-800 Questions]

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.

You need to ensure that if an attacker compromises the computer account of RODC1, the attacker cannot view the Employee-Number AD DS attribute. Which partition should you modify?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Ollie
9 months ago
The schema doesn't control attribute visibility, right?
upvoted 0 times
...
Rickie
9 months ago
I thought it might be the global catalog instead.
upvoted 0 times
...
Jin
10 months ago
Wait, are we sure about that?
upvoted 0 times
...
Jackie
10 months ago
Totally agree, domain is the way to go!
upvoted 0 times
...
Mattie
10 months ago
You need to modify the domain partition.
upvoted 0 times
...
Toi
10 months ago
I’m leaning towards modifying the domain partition, but I keep second-guessing myself about whether the configuration partition could also play a role.
upvoted 0 times
...
Ceola
10 months ago
I remember discussing the importance of the schema partition, but I don't think that's the right choice here.
upvoted 0 times
...
Tarra
11 months ago
This question reminds me of a practice scenario where we had to secure attributes in AD. I feel like the global catalog might be involved somehow.
upvoted 0 times
...
Katy
11 months ago
I think we need to modify the domain partition to restrict access to the Employee-Number attribute, but I'm not entirely sure.
upvoted 0 times
...
Adria
11 months ago
I'm pretty sure the answer is B - the internal auditor can't communicate the results to an external party like the advertising agency, regardless of what the audit client says. The IIA guidance is clear on that.
upvoted 0 times
...
Johnetta
11 months ago
Hmm, I'm a bit confused on this one. I know there are some built-in variables in the Program Data Vector, but I can't remember which one specifically tracks the iteration count.
upvoted 0 times
...

Save Cancel