Module 11

11-17) Which of the following port numbers is used to obtain updates from a WSUS server using HTTPS?

8531

11-6) Which section of a GPO contains the most security-related settings for the Windows operating system?

Computer Configuration, Windows Settings

11-20) What can you configure in the Windows Defender Firewall with Advanced Security tool to automatically protect network traffic between computers using IPSec?

Connection Security Rules

11-19) Which of the following Windows Defender features can be used to limit the files, folders and processes that ransomware can modify?

Controlled folder access

11-9) Which term refers to the process whereby a user or computer obtains a certificate from a CA?

Enrollment

11-12) Only schema version 1 certificate templates can be configured for auto-enrollment. True or False?

False. Only schema version 2 (and later) certificate templates can be configured for auto-enrollment.

11-14) You must enroll each WAP for a certificate based on the RAS and IAS Server certificate template before they can be configured for 802.1X Wireless. True or False?

False. Only the RADIUS server must be enrolled for a certificate based on the RAS and IAS Server certificate template.

11-2) There are no GPOs created in an Active Directory domain by default. True or False?

False. The Default Domain Policy and Default Domain Controllers Policy GPOs are created by default in each domain.

11-8) Which of the following is not included in a certificate?

Private Key

11-5) You wish to configure a GPO that allows users in your organization to install a package using the Programs and Features section of Control Panel. Which software deployment method should you choose when configuring the Software Settings section of a GPO?

Publish the software in the User Configuration

11-13) In an 802.1X Wireless configuration, which component generates the encryption keys used for WPA?

RADIUS server

11-11) Which certificate template permissions must you grant to a user or computer before they are auto-enrolled for a certificate using Group Policy? (Choose all that apply.)

Read Enroll Autoenroll

11-3) You have created a new Group Policy Object (GPO). To which of the following objects can this GPO be linked?

Site Domain, OU.

11-10) Group Policy can be configured to auto-enroll certificates for users and computers based on the permissions in a certificate template on an enterprise CA. True or False?

True. Group Policy can auto-enroll users and computers for certificates from an enterprise CA based on the permissions on a certificate template.

11-4) Group Policy preferences can be used to configure Windows features, but are only interpreted by Windows 7, Windows Server 2008, and later computers by default. True or False?

True. Group Policy preferences provides for the configuration of specific Windows features (e.g., drive maps), but only Windows 7 and Windows Server 2008 were designed to interpret them. Windows XP, Vista, and Server 2003 must install the Group Policy Preference Client Side Extensions package to interpret them.

11-16) To reduce the amount of storage that is consumed by updates on a WSUS server, you should configure the WSUS server to only synchronize updates for products that are deployed in your organization. True or False?

True. Specifying a smaller number of products in the synchronization configuration will download fewer updates from Microsoft Update. If additional products are deployed in the organization, you can easily modify the configuration to include them.

11-18) Firewall profiles contain a series of firewall rules that apply to a computer when it is connected to a particular type of network (public, private, domain). True or False?

True. There are three firewall profiles (domain, private, public) that represent the different networks that a computer can be connected to. Firewall rules are stored in different firewall profiles and automatically applied when the computer is connected to the associated network types.

11-7) You can import administrative template files into a GPO to allow Group Policy to configure third-party software settings. True or False?

True. Third-party software vendors provide administrative template files that can be imported into a GPO in order to configure third-party software settings.

11-15) Which of the following statements regarding the functionality of WSUS are true? (Choose all that apply.)

Updates can be manually or automatically approved for distribution on a WSUS server. Group Policy is used to direct domain computers to a WSUS server for updates. Wa. WSUS prevents Microsoft Update traffic from saturating the bandwidth on an organization's Internet connection A WSUS server can be configured to remove updates from computers that have installed them.

11-1) Group Policy settings apply to which of the following objects?

Users Computers