Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to plan an auditing strategy that meets the following requirements:
. Audits all changes to Active Directory Domain Services (AD DS).
. Stores all auditing data in a central location.
What should you include in your plan?
A. Configure an audit policy for the domain. Configure Event Forwarding.
B. Configure an audit policy for the domain controllers. Configure Data Collector Sets.
C. Implement Windows Server Resource Manager (WSRM) in managing mode.
D. Implement Windows Server Resource Manager (WSRM) in accounting mode.
Correct Answer: A
Explanation/Reference:
AD DS AUDITING
In Windows 2000 Server and Windows Server 2003, there was one audit policy, Audit directory service access, that controlled whether auditing for directory service events was enabled or disabled. In Windows Server 2008, this policy is divided into four subcategories: Directory Service Access, Directory Service Changes, Directory Service Replication and Detailed Directory Service Replication.
To set up AD DS auditing,
1. Enable audit policies through GPMC (GUI) or Auditpol (CLI).
2. Set up individual auditing objects.
3. Set up subscription for event forwarding.
http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx
