Microsoft 1 Chapter 11

Prior to Windows Vista, Administrative Templates had a different file extension.Type the file extension.NOTE: Include the period in your answer.

.adm

You can export Starter GPOs to a file and then load that file into another environment that is completely independent of the source domain or forest.Type the name of the file extension for the file that can be exported.NOTE: Include a period in your answer.

.cab

The Security Settings section of a Group Policy is refreshed as least every ____ hours, regardless of the interval that you set for the refresh interval.NOTE: Type the number.

16

By default, in Windows 8.1 and Windows Server 2012 R2, how often do logon scripts run after sign-in?

5 minutes

An administrative template is made up of two XML files.Which two?

ADMX,ADML

Where are GPO container objects stored?

Active Directory

You have implemented a Group Policy that all users in the Marketing OU should receive except for the Marketing Managers group.How can you exempt the Sales Managers group?

Add the Marketing Managers group to the ACL and then Deny the Apply Group Policy permission on the GPO's ACL

Starter GPOs contain settings from which of the following nodes in both the User and Computer configuration areas of a GPO?

Administrative Templates

By default, the Authenticated Users group is assigned which two permissions settings when dealing with GPOs?

Apply Group Policy, Read

Which of the following are characteristics of Group Policy Preferences?

Are not removed when the GPO is no longer applied, Are not available for Local GPOs, They are not enforced (mandatory)

When are User-specific GPO settings applied?

At logon

This setting prevents GPOs linked to higher OUs, sites, and domains from being automatically inherited by the child-level.NOTE: Check your notes or Google it!

Block Inheritance

You have navigated to the following folder on your Domain Controller:

C:\Windows\SYSVOL\sysvol\{Adatum}\Policies\

When dealing with Administrative Templates, what provides a single point from which administration workstations can download the same Administrative Template files when editing a GPO?

Central Store

What are the two default GPOs that are created during the installation of the AD DS role?

Default Domain Policy, Default Domain Controllers Policy

You want to manage the permissions for a GPO.What TAB would you navigate to in order to change the permissions?

Delegation

You have created a GPO that you wish to affect users in the Users container and computers in the Computers container.Where should you link the GPO?

Domain

Fine-grained Password Policies

Each GPO has an ACL that defines permissions to that GPO.

Which of the following GPO-related tasks can be delegated independently?

Editing GPOs, Creating WMI filters, Creating GPOs

What are the three states that a policy setting can be in?

Enabled, Disabled, Not Configured

You can specify that the settings in a GPO link should take precedence over the settings of any child object.GPO-links that are configured in this manner cannot be blocked from the parent container.NOTE: Check your notes or Google it!

Enforced

How often do DCs have their GPO settings refreshed?

Every 90 minutes

Which of the following are new or updated GP settings and features for computers that run 2012 R2 or Windows 8.1?

Extended logging for Group Policy operations, Faster processing by using Group Policy Caching settings, Configuring charms, Increased support for IPv6

As a best practice, you should only deny access to the Authenticated Users group unless you want a certain group of users to be exempt from receiving settings from a GPO.

False

Finding specific settings in a GPO is a relatively easy-to-find task.

False

Group Policy has thousands of configurable settings in which you will need to memorize the paths and locations.

False

Local policy settings only apply to the local machine.Thus, you cannot export and import them to other computers.

False

The Group Policy Preferences node is only available under User Configuration in a Group Policy.

False

The default permission is for Everyone to have the Read and Apply Group Policy permissions applied.

False

To edit a GPO, a user simply needs the Read permission in order to open the template container.

False

You can only link a GPO to a single location at a time.

False

You want to be able to locate all of the configured settings in a GPO.You select the All Settings folder.What should you do next?

Filter

You would like to create, open, and edit a GPO graphically.Which tool would you use?

GPMC

What is an object that contains one or more group policy settings that apply configuration settings for users, computers, or both?

GPO

Type the name of the text file that stores the GPO version number.

GPT.ini

What defines a specific configuration setting to apply to an object (a computer, users, or both) within AD DS and is the most granular component of Group Policy?

Setting

Which of the following can GPOs be directly linked to?

Sites, Domains

What are templates that assist in the creation of GPOs that makes it easier and faster to create multiple GPOs with the same baseline configuration?

Starter GPOs

In the context of GPOs, what are the actual collection of settings that you can change?

Template

What are the two components that make up a GPO?

Template, Container

You have configured a setting in a GPO that only applies to Windows 8.1 computers.What will happen when your Windows 7 clients receive the GPO settings?

They will ignore the setting.

Administrative Templates and every other GPO setting is nothing more than a front-end GUI for back-end registry modifications.

True

All policy settings in a GPO's Administrative Templates are managed policies.

True

An administrator can download Administrative Templates that control Microsoft Office products from Microsoft's website.

True

An unmanaged policy is removed whenever an object falls out of the scope of a GPO. Tattooing

True

As a best practice you should not modify any of the settings in the default GPOs.

True

Because of cached user credentials, a number of User-specific settings may require two sign-ins before the user sees the effect of the GPO.

True

Group Policies that do not conflict with one another are applied cumulatively in their processing order.

True

If one section of a GPO is empty, for example the Computer section, you should disable it to speed up group policy processing.

True

In a larger, enterprise organization, there may be multiple administrators configuring various GPOs throughout the organization.

True

Many of the settings that are available in Group Policy Preferences are unmanaged settings.

True

The Group Policy client can identify an updated GPO by its version number.

True

The local workstation that the administrator uses to perform GPO administration always checks to see if a Central Store exists before loading the local Administrative Template files.

True

You are sitting at a Domain Controller and attempt to run the command to edit your Local Group Policy.However, you receive an error.You have forgotten that Domain Controllers cannot have Local GPOs.

True

Which GPO takes precedence in this configuration if there are conflicting policies among the GPOs linked to the container?

USER - Default Policies (TEST)

What are the two types of policy settings that can be provided by way of a GPO?

Unmanaged,Managed

To which two locations can Group Policy settings be applied?

User,Computer

In what order are Local GPOs processed? 1. Local GPO 2. Administrators and Non-Administrators GPO 3. ???

User-Specific

Which of the following are the layers of local GPOs?

User-Specific, Administrators, Local Group Policy, Non-Administrators

What are the three main configurable areas of a Group Policy for both Computer and User settings?

Windows Settings, Software Settings,Administrative Templates

You have disabled the following group policy setting:Prohibit Access to the Control PanelWill users be able to open the Control Panel?

Yes

You have been told to modify a Windows 8.1 tile-specific setting in a group policy.You begin to edit the Group Policy.However, you cannot find the setting in the Group Policy Editor.What is the most likely reason?

You are on a different operating system that is pulling the Administrative Template files from the local machine instead of a central store.

Type the name of the group in which its members can create new GPOs and edit or delete GPOs that they have created.

group policy created owners

You want to create a new GPO that is called "Module 11".Type the appropriate PowerShell command.

new-GPO -Name "module 11"

Type the name of the folder that you must create in this subfolder in order to create a Central Store.

policydefinition

In the context of Starter GPOs you can use preconfigured policies that provide security-oriented settings for SSLF clients that can be used as starting points when you design security policies.What does SSLF stand for?NOTE: Include a hyphen in your answer.

specialized security-limited functionality

You can delegate the ability to create and manage WMI filters either through the Group Policy Management Console (GPMC) or through the Delegation of Control Wizard in ADUC.What does WMI stand for?

windows management instrumentation

What is represented in the image?

Multiple Local GPOs

You have enabled the following group policy setting:Prohibit Access to the Control PanelWill users be able to open the Control Panel?

No

You have just deleted the link from a GPO to the domain.Does this also delete the GPO?

No

Conflicting GPO settings have been configured at the following levels:Domain, Site, OU, LocalWhich setting will "win"?

OU

Regardless of which computer you are sitting at, when editing a GPO, the version that you are editing is the version on the DC that has which FSMO role?

PDC Emulator

What is a Group Policy feature that includes more than 20 Group Policy extensions that expand a GPO's range of configurable settings?

Preferences

Type the name of the Shared Folder that contains the group policy template.

SYSVOL

Where are GPO templates stored?

SYSVOL shared folder

By default, which of the following users and groups have full access to manage Group Policy?

Creator Owner, Domain Admins, Enterprise Admins

In the case of conflicts between a GPO's Computer and User-specific settings, which setting wins?

Computer settings

In the context of GPOs, what defines basic attributes of the GPO, such as links and version numbers, but it does not contain any of the actual settings?

Container

Maintaining a consistent computing environment across an organization is challenging.Administrators need a means that will allow them to configure and enforce user and computer settings and restrictions.What feature of Windows Server 2012 R2 can provide that consistency by enabling administrators to manage and apply configuration settings centrally?

Group Policy

Type what the acronym GPO stands for.NOTE: Use the singular.

Group Policy Object

Which registry hive do Computer settings in a Group Policy modify?

HKey Local Machine

You have configured a Group Policy setting that applies to Windows 7 computers and above.What will you Vista computer do with the Group Policy setting as it receives its GPOs from the domain?

Ignore it

Which of the following tools can be used to refresh Group Policy manually?

Invoke-GPUpdate, GPUpdate, GPUpdate /force

You have created a GPO and defined all the settings that you want it to deliver.What should be your next step?

Link the policy to an OU, Site, or Domain