Module 11 Quiz - Windows Server
You wish to configure a GPO that allows users in your organization to install a package using the Programs and Features section of Control Panel. Which software deployment method should you choose when configuring the Software Settings section of a GPO? A) Publish the software in the User Configuration B) Assign the software in the User Configuration C) Publish the software in the Computer Configuration D) Assign the software in the Computer Configuration
A) Publish the software in the User Configuration
Which certificate template permissions must you grant to a user or computer before they are auto-enrolled for a certificate using Group Policy? (Choose all that apply.) A) Read B) Write C) Enroll D) Autoenroll
A) Read C) Enroll D) Autoenroll
Which section of a GPO contains the most security-related settings for the Windows operating system? A) User Configuration, Windows Settings B) Computer Configuration, Windows Settings C) User Configuration, Administrative Templates D) Computer Configuration, Administrative Templates
B) Computer Configuration, Windows Settings
What can you configure in the Windows Defender Firewall with Advanced Security tool to automatically protect network traffic between computers using IPSec? A) Firewall profiles B) Connection security rules C) IPSec rules D) Security Associations
B) Connection security rules
Which of the following Windows Defender features can be used to limit the files, folders and processes that ransomware can modify? A) Core isolation B) Memory integrity C) Controlled folder access D) Secure boot
C) Controlled folder access
In an 802.1X Wireless configuration, which component generates the encryption keys used for WPA? A) WAP B) Wireless client C) RADIUS server D) Domain controller
C) RADIUS server
Firewall profiles contain a series of firewall rules that apply to a computer when it is connected to a particular type of network (public, private, domain). A) True B) False
A) True
Group Policy can be configured to auto-enroll certificates for users and computers based on the permissions in a certificate template on an enterprise CA. A) True B) False
A) True
Group Policy preferences can be used to configure Windows features, but are only interpreted by Windows 7, Windows Server 2008, and later computers by default. A) True B) False
A) True
To reduce the amount of storage that is consumed by updates on a WSUS server, you should configure the WSUS server to only synchronize updates for products that are deployed in your organization. A) True B) False
A) True
You must enroll each WAP for a certificate based on the RAS and IAS Server certificate template before they can be configured for 802.1X Wireless. A) True B) False
B) False
You created a number of virtual machines and joined them to the Active Directory domain. These VMs will act as test computers for new Windows updates. Which of the following WSUS feature will you use to test and target updates to specific computers? A) WSUS delegation B) WSUS update segmentation C) GPO security filtering D) Computer groups
D) Computer groups
You have created a self-signed certificate and want it to be trusted by all devices in a domain. What should you do? A) Open the ports for the WSUS server in the firewall B) Export the certificate as a file C) Bind the certificate to the HTTPS port in IIS D) Export the certificate to the domain controller
D) Export the certificate to the domain controller
After creating a self-signed certificate in Internet Information Services (IIS) Manager for the Windows Server Update Services (WSUS) server, what is the next step you need to perform? A) Bind the certificate to the HTTPS port in IIS B) Export the certificate to the domain controller C) Export the certificate as a file D) Open the ports for the WSUS server in the firewall
A) Bind the certificate to the HTTPS port in IIS
You have created a new Group Policy Object (GPO). To which of the following objects can this GPO be linked? (Choose all that apply.) A) OU B) Group C) Site D) Domain
A) OU C) Site D) Domain
You have created a Group Policy Object for WSUS clients. The GPO path Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update has a policy setting called "Specify intranet Microsoft update service location." What is the purpose of this policy setting? [Choose two that apply]
A) The policy setting designates an intranet server to host updates from Microsoft Update C) The policy setting enables you to specify a WSUS server on your network that will function as an internal update service
You can import administrative template files into a GPO to allow Group Policy to configure third-party software settings. A) True B) False
A) True
Group Policy settings apply to which of the following objects? (Choose all that apply.) A) Users B) Computers C) Groups D) OUs
A) Users B) Computers
Which of the following statements regarding the functionality of WSUS are true? (Choose all that apply.) A) WSUS prevents Microsoft Update traffic from saturating the bandwidth on an organization's Internet connection. B) Group Policy is used to direct domain computers to a WSUS server for updates. C) Updates can be manually or automatically approved for distribution on a WSUS server. D) A WSUS server can be configured to remove updates from computers that have installed them.
All of the Above A) WSUS prevents Microsoft Update traffic from saturating the bandwidth on an organization's Internet connection. B) Group Policy is used to direct domain computers to a WSUS server for updates. C) Updates can be manually or automatically approved for distribution on a WSUS server. D) A WSUS server can be configured to remove updates from computers that have installed them.
Which of the following is not included in a certificate? A) Public key B) Private key C) Digital signature D) CRL location
B) Private key
Which term refers to the process whereby a user or computer obtains a certificate from a CA? A) PKI B) enrollment C) revocation D) hashing
B) enrollment
Which of the following port numbers is used to obtain updates from a WSUS server using HTTPS? A) 80 B) 443 C) 8530 D) 8531
D) 8531
There are no GPOs created in an Active Directory domain by default. A) True B) False
B) False
You are importing the self-signed certificate in the Default Domain Policy. You navigate to the following node: Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Trusted Root Certification Authorities > Public Key Policies Which of the following Certificate store should you use to import the self-signed certificate? A) Trusted Publishers B) Immediate Certification Authorities C) Trusted Root Certification Authorities D) Untrusted Certificates
C) Trusted Root Certification Authorities
Only schema version 1 certificate templates can be configured for auto-enrollment. A) True B) False
B) False
