70-299 Real Exam Prep DEMO

Question 3: You are a security administrator for your company. The network consists of two Active Directory
domains. These domains each belong to separate Active Directory forests. The domain named
graphicdesigninstitute.com is used primarily to support company employees. The domain named
fineartschool.net is used to support company customers. The functional level of all domains is Windows
Server 2003 interim mode. A one-way external trust relationship exists in which the
graphicdesigninstitute.com domain trusts the fineartschool.net domain.
A Windows Server 2003 computer named Server1 is a member of the fineartschool.net domain. Server1
provides customers access to a Microsoft SQL Server 2000 database. The user accounts used by
customers reside in the local account database on Server1. All of the customer user accounts belong to a
local computer group named Customers. SQL Server is configured to use Windows Integrated
authentication.
Your company has additional SQL Server 2000 databases that reside on three Windows Server 2003
computers. These computers are member servers in the graphicdesigninstitute.com domain. The
company's written security policy states that customer user accounts must reside on computers in the
fineartschool.net domain.
You need to plan a strategy for providing customers with access to the additional databases. You want to
achieve this goal by using the minimum amount of administrative effort.
What should you do?
A.Create a new user account in the fineartschool.net Active Directory domain for each customer. Create a
universal group in the fineartschool.net domain. Add the new customer domain user accounts as
members of the new universal group. Assign this group permissions to access the databases.
B.Create a new user account in the fineartschool.net Active Directory domain for each customer. Create a
global group in the fineartschool.net domain. Add the new customer domain user accounts as members
of the new global group. Assign this group permissions to access the databases.
C.Create a new user account in the graphicdesigninstitute.com Active Directory domain for each
customer. Create a global group in the fineartschool.net Active Directory domain. Assign the new global
group permissions to access the databases.
D.Create a new user account in the graphicdesigninstitute.com Active Directory domain for each
customer. Create a universal group in the fineartschool.net Active Directory domain. Assign the new
universal group permissions to access the databases.
Correct Answer: B