VCP-310, 350-001 testking and 640-802 dumps

You work as a network administrator at Bilco Engineering, Inc. You have received
instruction to start the design of an access control and permission strategy that will
be used for user objects in Active Directory. You are required to select the
appropriate actions to take in the scenario

What should you do?

A. The permissions on the domain object and its child objects should be changed that the
BasicSupport security group is denied permissions.350-001 Also you should add permission to
each OU that contains user accounts allowing the AllSupport security group
members to reset passwords in that OU.
B. Full control should be delegated over all OUs that contain user accounts to all
AllSupport security group.
C. The members of the AdvancedSupport security group should be made members of the
Domain Admins security group.
D. Each desktop support technician should be given permission to reset passwords for the
top-level OU that contains user accounts at their own location.
Answer: D
Explanation: You should remember in the scenario that you can make use of the
Active Directory Users And Computers utility. The utility is used for managing the
Active Directory users, groups, and computers.640-802 In the scenario all the desktop support
technician should be able to reset passwords for the top level OU containing all the user
accounts at their locations. This will achieve:
1. Bilco Engineering, Inc. requires the Desktop support technicians at each retail office to
be capable of resetting user passwords for staff.
2. There will be at least one desktop support technician assigned for each retail office.
The support technicians depending on experience will have administrative rights to
server located in the North American retail offices.
3. Bilco Engineering, Inc. requires the accounts for the staff members to be located in the
OU for their primary work location.

Incorrect answers:
A: This option should not be used in the scenario as this will not help.VCP-310 The objectives
overview states less experienced staff members must also be members of the


Leading the way in IT testing and certification tools, www.certifyme.com
- 100 -

BasicSupport group.
B: This should not be done in the scenario as you would be over compensating. The
objective overview states all IT staff that support users must be members of the
AllSupport security group.
C: In the objectives overview the highly skilled IT staff must also be members of the
security group named BilcoSupport.

Reference:
Lisa Donald, Suzan Sage London & James Chellis, MCSA/MCSE: Windows Server
2003 Environment Management and Maintenance Study Guide, p. 143