CIST_2414_Exam_2_Units_4_6
An administrative template file using what file extension provides a language specific user interface in the Group Policy Management Editor?
.adml
By default, how many previous logons are cached locally to a computer?
10
Each Group Policy Object is assigned a globally unique identifier (GUID) of what length?
128 bits
By default, for how long are deleted objects stored within the Active Directory database before they are removed entirely?
180 days
A slow link, by default, is a network connection that's less than which of the following?
500 kbps
When a GPO is linked to a site object, what will be affected?
All users and computers physically located at the site
What policy setting can be used to force synchronous processing?
Always wait for the network at computer startup and logon
Which of the following are ways to change default GPO inheritance? (Choose all that apply.)
Blocking inheritance GPO enforcement
By default, what policies will be downloaded and processed by a Group Policy client?
Changed policies only
To find a full list of policies and preferences that can have background processing disabled, where should you look?
Computer Configuration\Policies\Administrative Templates\System\Group Policy
Under the Computer Configuration, which folder contains settings related to the Regional and Language Options, User Accounts, and Personalization options?
Control panel
What assigned value represents the bandwidth of the connection between sites?
Cost
What Active Directory replication method makes use of remote differential compression (RDC)?
Distributed File System Replication (DFSR)
Select the FSMO role that is required to be online to facilitate the addition or removal of a domain controller:
Domain naming master
Which of the following is not one of the criteria that can be used within an administrative templates filter?
Enable Action Filters
A site bridge is needed to connect two or more sites for replication.
F
Administrative template files are in HTML format, using the .admx extension.
F
Group policy caching improves system startup speed because the cache is used during asynchronous background processing, which occurs when the system boots.
F
The Backup Operators group is a group in local computers only.
F
The logical components of Active Directory are forests, domains, and sites.
F
If a domain consists of DCs that are running versions of Windows Server earlier than Windows Server 2008, what replication method is used?
File Replication Service (FRS)
The option to turn off background processing is not available for which type of policy below?
Folder redirection
Select the term used to describe forcing inheritance of settings on all child objects in the GPO's scope, even if a GPO with conflicting settings is linked to a container at a deeper level.
GPO enforcement
What tool can be used to determine what policy settings would apply to a computer or user account if it were moved to a different container?
Group Policy Modeling
Settings in the Computer Configuration node of Administrative Templates will impact which registry key below?
HKEY_LOCAL_MACHINE
Settings under the User Configuration node affect what Registry key?
HKEY_LOCAL_USER
Select the GPO state where the GPO is in the Group Policy Objects folder but hasn't been linked to any container objects.
Link status: unlinked
What PowerShell cmdlet will link a GPO to a site, domain or OU?
New-GPLink
An administrator has received a call indicating that some users are having difficulty logging on after a password change. Which FSMO role should be investigated?
PDC emulator
The RID master FSMO role is ideally placed on the same server as what other role?
PDC emulator
Select below the policy permission that grants a user or group the ability to use the GPO Modeling Wizard on a target container.
Perform Group Policy Modeling analyses
Which tab in the Group Policy Results window shows all events in Event Viewer that are generated by group policies, and can be used to view the relevant information on a remote computer?
Policy Events
Within the Security Configuration and Analysis snap-in, what does an exclamation point in a white circle indicate?
Policy doesn't exist on the computer
What permission is given to the Enterprise Domain Controllers universal group on all GPOs by default, and grants permission to view settings and back up a GPO?
Read
What is the name of a domain controller on which changes can't be written?
Read only domain controller
What folder contains group policy templates, logon/logoff scripts, and DFS synchronization data?
SYSVOL
If a central store for policy definition files has been created, where should the PolicyDefinitions folder reside?
SYSVOL folder
Which of the following are text files with a .inf extension that contain information for defining policy settings in the Computer Configuration\Policies\Windows Settings\Security Settings node of a local or domain GPO?
Security Templates
Which PowerShell cmdlet below can be used to set permissions for a security principal to a GPO or to all GPOs?
Set-GPPermission
Which policy below requires synchronous processing to ensure a consistent computing environment?
Software installation policies
What Security Settings policy manages the startup mode and security settings of services on target computers?
System Services
A delegated installation allows a domain administrator to create the RODC computer account in Active Directory, so a that a regular user can perform the installation at a later time.
T
A loopback policy can be used to change user policy settings based on the GPO within whose scope a computer object falls.
T
A migration table is a list of security principals and UNC paths in a GPO that can be mapped to the security principals and UNC paths in the destination domain.
T
An Active Directory snapshot is a replica of the Active Directory database at a specific moment.
T
Authentication efficiency, replication efficiency, and application efficiency are the three main reasons for establishing multiple sites
T
Command scripts are just a series of commands saved in a file with a .bat extension.
T
GPO enforcement is configured on a GPO, not on an Active Directory container.
T
GPOs set at the domain level should contain settings that you want to apply to all objects in the domain.
T
If you want to create a security template using a baseline of settings from an existing desktop computer or server, you can begin by opening secpol.msc.
T
Intrasite replication occurs between bridgehead servers.
T
What GPO policy will take precedence over all other GPO policies when they are being applied?
The last policy applied takes precedence
After running the Security Configuration and Analysis snap-in with a template, what does a check mark in a green circle mean?
The template policy and current computer policy are the same
How is a computer's designated site determined, such that the computer is given a domain controller to request services from within the same site?
Through subnets added to the site
During garbage collection, what setting controls how long deleted objects remain within the database before such objects are completely removed?
Tombstone lifetime
What type of policy setting is persistent, remaining even after a computer or user object falls out of a GPO's scope until it's changed by another policy or manually?
Unmanaged policy setting
Which of the following uses queries to select a group of computers based on certain attributes, and then applies or doesn't apply policies based on the query's results?
WMI filtering
How can an administrator remove all audit policy subcategories so that auditing is controlled only by Group Policy?
auditpol /clear
What tool within Windows Server 2016 must be used in order to change the default auditing settings?
auditpol.exe
What command below can be used to reset the default GPOs to their original settings?
dcgpofix
Which of the following manages adding, removing, and renaming domains in the forest?
domain naming master
What holds the log of Active Directory transactions or changes?
edb.log
How often does garbage collection run on a DC?
every 12 hours
What are the two flexible single master operation (FSMO) roles? (Choose all that apply.)
forest wide, domain wide
Within the NTDS folder, which file stores the main Active Directory database?
ntds.dit
Which of the following is a series of commands saved in a text file to be repeated easily at any time?
script
OU-linked policies are applied last so they take precedence over which policies? (Choose all that apply.)
site domain policies
How can an administrator initiate a system state recovery using the command line?
wbadmin start systemstaterecovery
Which option below is not one of the three main methods for cleaning up metadata?
wbsadmin.exe
ADMX and ADML files are placed under what directory within Windows?
%systemroot%\PolicyDefinitions