4. you have noticed that files on your local drives were recently deleted, and you don’t recall deleting them yourself. what two steps must you take to track all access to your local folders?
a. enable the local group policy for auditing successful file access attempts.
b. enable the local group policy for auditing unsuccessful file access attempts.
c. enable the local group policy for auditing successful object access attempts.
d. enable the local group policy for auditing unsuccessful object access attempts.
e. enable file auditing through windows explorer.
f. run the disperf –y command from a run line, use system monitor to examine the logical i/o connector, and restart the computer.
answer：c,e
5. you are a local administrator of a windows 2000 professional computer. a secretary named rena has local administrative rights. other users report that she has modified their files without permission. you want rena to be able to install programs, perform backups, and manage printers, but you do not want her to view, change or read files for which permission has not been granted to her. applying the least administrative effort, what should you do?
a. let rena be a local administrator and limit her rights using a local policy.
b. let rena be a local administrator and change the ntfs permissions on other files to deny maria from viewing or modifying them.
c. remove rena’s administrative rights. add her to the power users group and backup operators group.中 华 考 试 网
d. remove rena’s administrative rights. add her to the power users group and grant her ntfs permission to the files she will need to back up.
answer：c
