Securing Windows Server 2016 — Question 50

Your network contains an Active Directory domain.
You plan to implement Dynamic Access Control.
You need to create a central access rule that will grant permissions to users who have the Department attribute set to Finance. The users must have access to resources that have the Department property set to Finance.
Which two actions should you perform before you create the central access rule? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. Enable a claim type
• B. Create a central access policy
• C. Create a resource property list
• D. Enable a resource property
• E. Create a claim type

Correct answer: C, E

Explanation

Creating a resource property list (option C) is necessary to define the attributes associated with resources, while establishing a claim type (option E) allows for the definition of the claims that can be used in access rules. The other options, such as enabling a claim type or resource property, do not address the initial requirements for setting up the central access rule.