640-802 braindumps, 350-001 testking and VCP-310

You work as the senior network administrator at certifyme.com. The certifyme.com
network consists of a single Active Directory domain named certifyme.com. All
servers on the certifyme.com network run Windows Server 2003 and all client
computers run Windows XP Professional. There are currently four domain
controllers on the certifyme.com.

The certifyme.com help desk receives complaints from users in the Finance
department. The complaint is that they encounter an error message when they try
to log on to the domain. Consequently you investigate the issue and then discovered
that the two user accounts have been deleted. 350-001 All administrators have
administrative privileges assigned to manage the domain controllers and member
servers in the certifyme.com. Only administrators have the necessary permission to
add and remove user accounts from the domain.

The immediate suspicion is that someone has managed to use an account that has
administrative privileges assigned to delete the user accounts. Auditing is already
configured to monitor and track all attempts made to access management events on
the four domain controllers.
Leading the way in IT testing and certification tools, www.certifyme.com
- 84 -

You then decide to look for entries in an event log on a domain controller that
would contain information on who deleted these accounts using Event Viewer. 640-802

What should you do? (Answer by selecting the event log file you should use.)
Answer:
Explanation:
Leading the way in IT testing and certification tools, www.certifyme.com
- 85 -

The security log event file would display information on security specific events. It
would contain information on changes made to your security system, such as who deleted
user accounts. The application log event file would display information on events which
were logged by applications. The system event file would display information on events
which were logged by system components. VCP-310 The Directory Access Service event log
would contain information on events that pertain to accessing directory service objects in
Active Directory. The DNS log file would show you information specific to the DNS
server. The File Replication Service log file would show you information specific to
Active Directory replication.

Reference: