MCSA Exam 70-742, Chapter 5 - Managing Group Policies, Q&A

c. Right-click the Group Policy Objects folder and click Manage Backups. REFERENCE: GPO Backup and Restore

A junior administrator deleted a GPO accidentally, but you had backed it up. What should you do to restore the deleted GPO? a. Right-click the GPO backup file in File Explorer and click Restore. b. Open the Active Directory Recycle Bin, right-click the GPO object, and click Restore. c. Right-click the Group Policy Objects folder and click Manage Backups. d. Create a GPO, right-click the new GPO, and click Restore from Backup.

a. GPO status: Enabled c. Link status: Enabled d. GPO status: All settings disabled REFERENCE: GPO Scope and Precedence

After a GPO is created, which of the following are possible states for the new GPO? (Choose all that apply.) a. GPO status: Enabled b. GPO status: Unlinked c. Link status: Enabled d. GPO status: All settings disabled

a. Block inheritance REFERENCE: Group Policy Inheritance

An OU structure in your domain has one OU per department, and all the computer and user accounts are in their respective OUs. You have configured several GPOs defining computer and user policies and linked the GPOs to the domain. A group of managers in the Marketing Department need different policies that differ from those of the rest of the Marketing Department users and computers, but you don't want to change the top-level OU structure. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. GPO enforcement c. WMI filtering d. Loopback processing

a. Delegation settings b. Security filtering settings d. WMI filter links REFERENCE: GPO Backup and Restore

An administrator has just backed up a GPO to save specific policy settings. Which of the following additional settings and information were also backed up in this procedure? (Choose all that apply.) a. Delegation settings b. Security filtering settings c. Network Policy Updates d. WMI filter links

c. Group Policy caching REFERENCE: Group Policy Caching

An administrator would like to configure a computer to load policy information that is stored locally to speed system startup. What client-side feature should the administrator select? a. Locals processing b. WMI filtering c. Group Policy caching d. Network Location Awareness

b. The Computer Configuration settings are disabled. c. The computer accounts have Deny Read permission. REFERENCE: GPO Filtering

None of the computers in an OU seem to be getting computer policies from the GPO linked to the OU, but users in the OU are getting user policies from this GPO. Which of the following are possible reasons that computer policies in the GPO aren't affecting the computers? (Choose all that apply.) a. The GPO link is disabled. b. The Computer Configuration settings are disabled. c. The computer accounts have Deny Read permission. d. The OU has the Block Inheritance option set.

d. Configure asynchronous processing when a slow link is detected. REFERENCE: Synchronous and Asynchronous Processing

Users who log on from a branch office connected to the DC via a slow WAN link are complaining of slow logon times when you assign applications via group policies. What can you do to speed their logons? a. Perform a remote group policy update. b. Disable Group Policy caching. c. Configure synchronous processing when a slow link is detected. d. Configure asynchronous processing when a slow link is detected.

c. Background processing REFERENCE: Configuring Group Policy Client Processing

What kind of group policy processing always occurs when a user is logged on to the computer at the time a group policy refresh occurs? a. Foreground processing b. Slow link processing c. Background processing d. Selective processing

d. Local GPOs, site, domain, OU REFERENCE: GPO Scope and Precedence

Which of the following represents the correct order in which GPOs are applied to an object that falls within the GPO's scope? a. Site, domain, OU, local GPOs b. Local GPOs, domain, site, OU c. Domain, site, OU, local GPOs d. Local GPOs, site, domain, OU

b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers. REFERENCE: Loopback Policy Processing

You don't have policies that force settings for the look of users' computer desktops. Each user's chosen desktop settings are applied from his or her roaming profile to any computer he or she signs in to. You think it's important for users to have this choice, but you'd like a consistent look for computers used for product demonstrations to customers. What's the best way to do this without affecting users when they sign in to other computers? a. Configure desktop policies in the Computer Configuration node of a GPO and link this GPO to the OU containing the demonstration computers. b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers. c. Create a user named Demo. Configure Demo's desktop settings and use only this user account to sign in to demonstration computers. d. Create a GPO with a startup script that configures desktop settings suitable for demonstration computers when these computers are started. Link the GPO to the OU containing the demonstration computers. Instruct users to restart demonstration computers before using them.

c. Slow link processing REFERENCE: Configuring Slow Link Processing

You have a branch office connected to the main office with a sometimes unreliable and slow WAN link. Users are complaining about long logon times. Which Group Policy client feature are you most likely to configure to solve the problem? a. Synchronous processing b. Background processing c. Slow link processing d. Remote update processing

c. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO. REFERENCE: GPO Filtering

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU's settings, but all other policy settings are still in effect for them. What's the best way to proceed? a. Move the three users to a new OU. Create a GPO with settings suitable for the three users, and link it to the new OU. b. Create an OU under Operations, and move the three users to this new OU. Create a GPO and link it to this new OU. Configure the new OU to block inheritance of the RestrictU GPO. c. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO. d. Set the Enforced option on RestrictU with a WMI filter that excludes the three user accounts.

b. GPO enforcement

You have created a GPO that sets certain security settings on computers. You need to make sure that these settings are applied to all computers in the domain. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. GPO enforcement c. WMI filtering d. Loopback processing

d. You need to configure the firewall on the computers. REFERENCE: Forcing Group Policy Updates

You have just finished configuring a GPO that modifies several settings on computers in the Operations OU and linked the GPO to the OU. You right-click the Operations OU and click Group Policy Update. You check on a few computers in the Operations department and find that the policies haven't been applied. On one computer, you run <CTX>gpupdate</CTX> and find that the policies are applied correctly. What's a likely reason the policies weren't applied to all computers when you tried to update them remotely? a. The Computer Configuration node of the GPO is disabled. b. A security filter that blocks the computer accounts has been set. c. The Operations OU has Block Inheritance set. d. You need to configure the firewall on the computers.

c. Run the <CTX>Get-ADComputer</CTX> and <CTX>Invoke-GPUpdate</CTX> PowerShell cmdlets. REFERENCE: Forcing Group Policy Updates

You have just made changes to a GPO that you want to take effect as soon as possible on several user and computer accounts in the Sales OU. Most of the users in this OU are currently signed in to their computers. There are about 50 accounts. What's the best way to update these accounts with the new policies as soon as possible? a. Configure a script preference that runs <CTX>gpupdate</CTX> the next time the user signs out. b. Configure the GPO to perform foreground processing immediately. c. Run the <CTX>Get-ADComputer</CTX> and <CTX>Invoke-GPUpdate</CTX> PowerShell cmdlets. d. Use the <CTX>gpupdate /target:Sales /force</CTX> command.

a. Migration table REFERENCE: GPO Migration

You manage a multidomain forest with domains named DomainA and DomainB. You want to use the GPOs from DomainA in DomainB without having to reconfigure all GPOs. What do you need to configure? a. Migration table b. GPO backup and restore c. Delegation d. RSoP

b. Run Group Policy Modeling. REFERENCE: Group Policy Results and Modeling

You need to move some user and computer accounts in Active Directory, but before you do, you want to know how these accounts will be affected by the new group policies they'll be subject to. What can you do? a. Run <CTX>secedit.exe</CTX> with the planning option. b. Run Group Policy Modeling. c. Run Group Policy Results. d. Run RSoP in logging mode.

b. <CTX>gpresult</CTX> REFERENCE: Group Policy Results and Modeling

You want to create an HTML report that shows which policies and GPOs are applied to a particular user and computer. Which command should you use? a. <CTX>gpupdate</CTX> b. <CTX>gpresult</CTX> c. <CTX>rsop</CTX> d. <CTX>Invoke-GPReport</CTX>

d. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain. REFERENCE: GPO Filtering

You want to create policies in a new GPO that affect only computers with Windows 8 installed. You don't want to reorganize your computer accounts to do this, and you want computers that are upgraded to Windows 10 to fall out of the GPO's scope automatically. What can you do? a. For each policy, use selective application to specify Windows 8 as the OS. b. Create a new OU, place all computer accounts representing computers with Windows 8 installed in this OU, and link the GPO to this OU. c. Create a group called Win8Computers. Place all computer accounts representing computers with Windows 8 installed in this group and use this group in a security filter on the GPO. Link the GPO to the domain. d. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain.

b. Run <CTX>gpofix</CTX>. REFERENCE: GPO Backup and Restore

You were hired to fix problems with group policies at a company. You open the GPMC to look at the default GPOs and see that extensive changes have been made to both. You want to restore settings to a baseline so that you know where to start. What should you do? a. Delete the default GPOs and create new GPOs with the same names. b. Run <CTX>gpofix</CTX>. c. Create a domain and use GPO migration. d. Run <CTX>gpupdate /revert</CTX>.