You have five tile servers that run Windows Server. You need to block users from uploading video files that have the .mov extension to shared folders…

The most appropriate and efficient solution is to use the File Server Resource Manager (FSRM) role service. FSRM includes a feature called file screening, which is specifically designed to control the types of files users can save on a file server. You can create a file group that includes the .mov extension and then apply a file screen to the relevant shared folders. This directly blocks the specified file type. To minimize administrative effort across the five servers, a file screen template can be created and applied consistently, ensuring a centralized and straightforward management approach.

A. a Dynamic Access Control central access policy: This controls access based on user, device, and resource properties (claims), not file extensions.

C. a Dynamic Access Control central access rule: This is a component of a DAC policy and is also not designed for filtering files by type.

D. a data loss prevention (DLP) policy: DLP is primarily used to identify and protect sensitive data based on its content, not just its file extension.

1. Microsoft Learn

File Server Resource Manager (FSRM) overview. This document introduces FSRM as the toolset for managing and classifying data on file servers

explicitly mentioning file screening as a key capability. See the "Features" section.

Source: https://learn.microsoft.com/en-us/windows-server/storage/fsrm/fsrm-overview

2. Microsoft Learn

File Screening Management. This document details the file screening functionality. It states

"File screening allows you to control the types of files that user can store on a file server." It describes creating file groups (for extensions like .mov) and file screens to block them.

Source: https://learn.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management

3. Microsoft Learn

Create a File Screen. This guide provides the step-by-step procedure for implementing a file screen. Step 4 specifically covers selecting a file group to block

which would contain the .mov extension in this scenario.

Source: https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-screen