Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources 304 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization has a security policy that requires using SIDs instead of group names for group mapping to avoid issues with renamed groups. The administrator is configuring a new access policy. What is a consideration when using SIDs for group mapping?

   • ASIDs allow mapping to nested groups without additional configuration.
   • BSIDs are easier to read and manage than group names.
   • CSIDs remain stable even if the group is renamed, so the mapping continues to work.
   • DSIDs are more secure than group names because they are encrypted.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An organization is planning to migrate from using group names to using SIDs for group mapping to improve security. They have a large number of existing access policies. What is a key consideration during this migration?

   • AThe migration will require updating all access policies to use the new SIDs.
   • BSIDs are easier to manage than group names, so the migration will simplify administration.
   • CSIDs are more secure than group names, so the migration will improve security.
   • DThe migration will automatically include nested groups, so no additional configuration is needed.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator is troubleshooting a group mapping issue where a user is not getting access. The session variables show the correct group is present. The access policy has a rule that checks for the group and assigns the resource. The logs show that the rule is being evaluated but not matching. What is a likely cause?

   • AThe resource assignment is incorrect.
   • BThe user is not a member of the group.
   • CThe group name in the rule has a typo or does not match the session variable exactly.
   • DThe AD server is not returning the group.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization wants to grant access to a resource based on AD group membership. They have a large number of groups and want to simplify management. What is a best practice for mapping AD groups to resources?

   • ACreate a separate access policy for each group.
   • BUse the user's department attribute to determine access.
   • CUse a single group that contains all users who need access, and map that group to the resource.
   • DMap each individual user to the resource instead of using groups.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator notices that a user is not receiving access to a resource even though the user is a member of the required AD group. The access policy uses a group mapping rule. What is the most likely cause of this issue?

   • AThe group is a nested group, and the APM is not configured to retrieve nested group memberships.
   • BThe user's password has expired, preventing group retrieval.
   • CThe access policy is using the wrong AD server for group lookup.
   • DThe AD server is not returning the group membership because the user's token is too large.
   Reveal Solution Discussion Select an answer first