Deck 7: Configuring Group Policy

Question 1

How can you ensure that a GPO's settings are applied to all child objects,even if a GPO with conflicting settings is linked to a container at a deeper level?

A)GPO Filtering
B)Enforcing inheritance
C)Loopback policy processing
D)Blocking inheritance

Answer 1

B

Question 2

A Group Policy Template is stored in Active directory.

Answer 2

False

Question 3

Settings in local GPOs that are inherited from domain GPOs can't be changed on the local computer;only settings that are undefined or not configured by domain GPOs can be edited locally.

Answer 3

True

Question 4

Because the GPC and GPT use different replication methods,they can become out of sync

Question 5

What subnode under Security Settings applies to wireless network policies?

A)Wireless Network (IEEE 802.3)Policies
B)IP Security Policies on Active Directory
C)Wireless Network (IEEE 802.11)Policies
D)Network Access Protection

Question 6

Which of these is something group policy templates and group policy containers have in common?

A)Their folder location
B)File names
C)folder structure
D)Active Directory location

Question 7

Under Password policies,what is the default maximum password age?

A)30 days
B)2 months
C)42 days
D)100 days

Question 8

If a software package is assigned to a group of targeted computers via the Computer Configuration node,what happens?

A)Next time a user logs in to one of the targeted computers,they are prompted to install the package
B)The package is advertised in Add/Remove programs as an installation option
C)The package is placed on the computers but is not installed until a member of the Administrators group installs it
D)The package installation is mandatory and begins the next time the computer starts

Question 9

What is a major drawback to enabling the auditing of object access?

A)decreased security
B)too much information is logged
C)not ideal for highly secure environments
D)involves considerable overhead

Question 10

Which of these is not a new GPO in Windows Vista and Server 2008?

A)Local Administrators GPO
B)Local Non-Administrators GPO
C)User-Specific GPO
D)Local Computers GPO

Question 11

What would you use to prevent GPOs linked to parent containers from affecting child containers?

A)GPO filtering
B)Enforcing inheritance
C)Loopback policy processing
D)Inheritance blocking

Question 12

A published application is installed automatically.

Question 13

If an application is published through User Configuration's Software Settings,what happens?

A)A link to install the application is placed in Control Panel's Programs and Features (Vista / Server 2008)or Add / Remove programs (XP)
B)The package is installed automatically next time a user logs in
C)Computer will install the package upon startup
D)Package will be advertised as a link on the Start menu

Question 14

Fine-grained password policies are created by defining a....

A)Password Settings Object
B)Password Schema Object
C)Password Selective Object
D)A normal GPO

Question 15

What could you use to make user policy settings be based on the GPO within whose scope the computer object falls?

A)GPO Filtering
B)Enforcing inheritance
C)Loopback policy processing
D)Blocking inheritance

Question 16

What can you use to restrict GPO inheritance to specific objects in an OU?

A)GPO Filtering
B)Enforcing inheritance
C)Loopback policy processing
D)Blocking inheritance

Question 17

What nodes or folders does a Starter GPO contain?

A)Only Administrative Templates folder in both Computer Configuration and User Configuration
B)Contains all the nodes that a normal GPO would,except for Windows Settings in both Computer Configuration and User Configuration
C)Contains all the nodes that a normal GPO would,except for Software settings in both Computer Configuration and User Configuration
D)Only the Windows Settings folder in both Computer Configuration and User Configuration

Question 18

If you make changes to an existing GPO that's already linked in Active Directory,how fast do the policy settings take effect?

A)50 seconds
B)30 minutes
C)1 hour
D)As soon as the client downloads them

Question 19

The account lockout threshold contains a value between 0 and 1,000 that determines how many times a user's password can be entered incorrectly before the user's password must be reset by an administrator.

Question 20

One of the answers below is not a valid scripting language supported by Scripts (Startup/Shutdown)subnode.Select the invalid answer.

A)bash scripts
B)VBScript
C)JScript
D)batch files

Question 21

What is the default location of ADMX files?

A)%systemroot%\Policies
B)%systemroot%\Policies\ADMX
C)%systemroot%\PolicyDefinitions
D)%systemroot%\PolicyDefinitions\ADMX

Question 22

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A GPO component that's an Active Directory object stored in the System\Policies folder

Question 23

There are two types of GPO filtering: security filtering and ___________________________________ filtering.

Question 24

You work for the large Example.com corporation.Recently,Example.com has been adding new branch offices at a steady rate.Just last week,a new branch office was created and now you have been put in charge of configuring group policy settings for the branch office.Because this branch office will be fairly large,it will be set up as a separate domain.
Since there are several branch offices with similar GPO requirements,you want to be able to make use of GPOs that have already proven to be useful.What is the easiest way to make the policies in this new branch office similar to those already in place?

A)Manually recreate all GPO settings from the other domains and link them to the new domain
B)Use GPO migration by adding the domains with the policies you want to GPMC,and then copy and paste them.
C)Use CSVDE to import the GPOs via comma separated values in text files
D)Backup the desired GPOs on the domains you want to mimic,then restore the GPOs in the new domain

Question 25

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A Group Policy Object that's stored on local computers and can be edited by the Group Policy Object Editor snap-in

Question 26

When configuring Software Restriction policies,you can create exceptions to the default rule.One of the four ways of identifying an application as an exception to the default rule is by use of a ____________________,which is a digital fingerprint of the application file,based on the files attributes.

Question 27

Which of the terms below best fits the following description?
A GPO component that's an Active Directory object stored in the System\Policies folder.It stores GPO properties and status information but no actual policy settings.

A)Group Policy Container (GPC)
B)Group Policy Template (GPT)
C)Domain GPO
D)Starter GPO

Question 28

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A method to alter the normal scope of a GPO and exclude certain objects from being affected by its settings

Question 29

The settings in Administrative Templates under User Configuration affect what section of the computer's registry?

A)HKEY_USERS
B)HKEY_CURRENT_USER
C)HKEY_LOCAL_MACHINE
D)HKEY_CURRENT_CONFIG

Question 30

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
XML format text files that define policies in the Administrative Templates folder in a GPO

Question 31

A(n)____________________ file is a collection of files packaged into a single file and contains the instructions Windows Installer needs to install the application correctly.

Question 32

You can customize MSI file installations by using a transform file,which uses the ____________________ extension.

Question 33

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
Text files with an .inf extension that contain information to define policy settings in the Computer Configuration\Policies\Windows Settings\Security Settings node of a local or domain GPO

Question 34

____________________ is a feature that enables administrators to set policies that cause folders in a user's profile directory to be stored elsewhere,usually to a location on a server.

Question 35

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A new feature in Server 2008,used to set different password and account policies for targeted users and groups

Question 36

GPC replication between domain controllers in the same site occurs at about what interval after a change has been made by default?

A)20 seconds
B)50 seconds
C)30 seconds
D)15 seconds

Question 37

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A report showing which policy settings apply to a user,computer,or both and where these policy settings originated

Question 38

What command can be used to perform tasks similar to those in Group Policy Results Wizard and the Resultant Set of Policy snap-in?

A)gpupdate
B)gptest
C)gpcheck
D)gpresults

Question 39

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
Group Policy Objects stored in Active Directory on domain controllers.

Question 40

MATCHING
a.Administrative template files
f.Group Policy Template
b.domain GPOs
g.local GPOs
c.fine-grained password policies
h.Resultant Set of Policy
d.GPO filtering
i.Security templates
e.Group Policy Container
A GPO component that's stored as a set of files in the Sysvol share

Question 41

What is the default setting for "Minimum password age" under Password Policies?

Question 42

What Security Settings subnode allows you to control IPSec policies on target computers?

Question 43

Starter GPOs can be shared with other administrators by placing them into what type of file?

Question 44

What is the default setting for the "Store Passwords using reversible encryption" option?

Question 45

The folder that starts with these four characters is the GPT for the Default Domain Policy.

Question 46

You want to be able to control all auditing specifically by Group Policy only.What command can you type to stop all auditing on the computer where you run it?

Question 47

GPT's are replicated by using this service when you have a mix of Windows Server 2008,Windows Server 2003,and Windows 2000 domain controllers.

Question 48

This command line tool performs many of the same functions as the Security Configuration and Analysis snap-in.

Question 49

This file contains the version number used to determine when a GPO has been modified.

Question 50

The folder that starts with these four characters is the GPT for the Default Domain Controllers policy.