Module 4 Quiz Configuring Group Policies

Which of the following is best described as policy definition files saved in XML format? a. Administrative templates b. Security templates c. Group Policy objects d. Group Policy templates

a. Administrative templates

An OU structure in your domain has one OU per department, and all the computer and user accounts are in their respective OUs. You have configured several GPOs defining computer and user policies and linked the GPOs to the domain. A group of managers in the Marketing Department need different policies from the rest of the Marketing Department users and computers, but you don't want to change the top-level OU structure. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. GPO enforcement c. WMI filtering d. Loopback processing

a. Block inheritance

You're having replication problems with your GPOs and suspect that the version numbers have somehow gotten out of sync between the GPT and the GPC. What can you do to verify the version numbers on a GPO? a. Check the versionNumber attribute of the GPC and open the GPT.ini file. b. Check the versionNumber attribute of the GPT and open the GPC.ini file. c. Right-click the GPO in the Group Policy Management console, click Properties, and view the version in the General tab. d. Right-click the GPO in the Group Policy Management Editor, click Properties, and view the version in the General tab.

a. Check the versionNumber attribute of the GPC and open the GPT.ini file.

You want to set a group policy preference that affects only computers with a CPU speed of at least 4.0 GHz. What's the best way to do this? a. Configure item-level targeting. b. Move all computers meeting the criteria to a separate OU. c. Configure the group policy client on each computer with this type of CPU. d. Create a WMI filter with the Group Policy Management Editor.

a. Configure item-level targeting.

After a GPO is created, which of the following is a possible state for the new GPO? (Choose all that apply.) a. GPO status: Enabled b. GPO status: Unlinked c. Link status: enabled d. GPO status: All Settings Disabled

a. GPO status: Enabled c. Link status: enabled d. GPO status: All Settings Disabled

Which of the following is a local GPO on a Windows 10 computer? (Choose all that apply.) a. Local Administrators b. Local Default User c. Local Default Domain d. Local Non-Administrators

a. Local Administrators d. Local Non-Administrators

You want to centrally back up the files that users store in the Documents folder in their user profiles, but you don't want users to have to change the way they access their files. What's the best way to go about this? a. Deploy a script that copies files from the Documents folder to a share on a server. b. Configure folder redirection in the User Configuration node of a GPO. c. Deploy a Mapped Drive preference and tell users to save their files to the mapped drive. d. Configure a backup policy in the Computer Configuration node of a GPO.

b. Configure folder redirection in the User Configuration node of a GPO.

You don't have policies that force settings for the look of users' computer desktops. Each user's chosen desktop settings are applied from the user's roaming profile to any computer the user signs in to. You think it's important for users to have a choice, but you'd like a consistent look for computers used for product demonstrations to customers. What's the best way to do this without affecting users when they sign in to other computers? a. Configure desktop policies in the Computer Configuration node of a GPO and link this GPO to the OU containing the demonstration computers. b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers. c. Create a user named Demo. Configure Demo's desktop settings and use only this user account to sign in to demonstration computers. d. Create a GPO with a st

b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers.

Which of the following do you need to do before you can start working with Group Policy on Azure accounts? (Choose all that apply.) a. Configure Azure AD. b. Create a Windows Server VM in Azure. c. Join an Azure VM to the Azure AD DS domain. d. Install Azure AD Connect on the Azure VM.

b. Create a Windows Server VM in Azure. c. Join an Azure VM to the Azure AD DS domain.

You have been working with ADMX files to modify existing Administrative Templates and create new templates. You work on different domain controllers, depending on your location. Despite a concerted effort, your ADMX files are getting out of sync. How can you solve this problem? a. Remove Group Policy Management tools from all but one domain controller so that policies can be managed from only one computer. b. Create an ADMX store in the SYSVOL share and copy the ADMX files to the ADMX store. c. Create an ADMX store in Active Directory and move all your ADMX files to Active Directory. d. Share the %systemroot%\PolicyDefinitions folder on all your domain controllers and set up Task Scheduler to copy ADMX files automatically from one system to all other systems.

b. Create an ADMX store in the SYSVOL share and copy the ADMX files to the ADMX store.

You have created a GPO that sets certain security settings on computers. You need to make sure these settings are applied to all computers in the domain. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. GPO enforcement c. WMI filtering d. Loopback processing

b. GPO enforcement

Which of the following are methods for linking a GPO to a container? (Choose all that apply.) a. In ADUC, right-click the container and then select "Create a GPO in this domain and link it here." b. In the GPMC, right-click the container and then select "Create a GPO in this domain and link it here." c. In the GPMC, right-click a container and select Link an Existing GPO. d. In ADAC, right-click a container and select Link an Existing GPO.

b. In the GPMC, right-click the container and then select "Create a GPO in this domain and link it here." c. In the GPMC, right-click a container and select Link an Existing GPO.

You need to find a policy related to an application that was installed a couple of years ago. You know that the policy is persistent when the computer it's applied to falls out of scope, but you can't remember its name. You remember a word or two that might be in the policy name or comments. What can you do to find this policy quickly? a. In the Group Policy Management console, create a policy search term; set Persistent to Any, and enable Full Text search. b. In the Group Policy Management Editor, configure a filter; set Managed to No, and enable Keyword Filters. c. In the Group Policy Management console, configure a search script; set Managed to Yes, and enable Requirements Filters. d. In the Group Policy Management Editor, configure a policy screen; set Persistent to Yes, and enable Title and Comments.

b. In the Group Policy Management Editor, configure a filter; set Managed to No, and enable Keyword Filters.

You have created a custom administrative template. You want this template to be available to all DCs so that policies can be configured with it from any DC. Where should you save it? a. In %systemroot%\PolicyDefinitions b. In the central store c. In the root of the C drive d. In ADUC

b. In the central store

None of the computers in an OU seem to be getting computer policies from the GPO linked to the OU, but users in the OU are getting user policies from this GPO. Which of the following is a possible reason that computer policies in the GPO aren't affecting the computers? (Choose all that apply.) a. The GPO link is disabled. b. The Computer Configuration settings are disabled. c. The computer accounts have Deny Read permission. d. The OU has the Block Inheritance option set.

b. The Computer Configuration settings are disabled. c. The computer accounts have Deny Read permission.

You have configured a policy setting in the User Configuration node of a domain GPO and linked the GPO to OU-X. Later, you discover you linked it to the wrong OU, so you unlink it from OU-X and link it to OU-Y, which is correct. A few days later, you find that users in OU-X still have the policy setting applied to their accounts. What's the most likely cause of the problem? a. Group policy settings haven't been refreshed. b. The policy setting is unmanaged. c. Users in OU-X have an item-level target filter configured. d. The GPO is disabled

b. The policy setting is unmanaged.

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU's settings but that all other policy settings are still in effect for them. What's the best way to proceed? a. Move the three users to a new OU. Create a GPO with settings suitable for the three users and link it to the new OU. b. Create an OU under Operations and move the three users to this new OU. Create a GPO and link it to this new OU. Configure the new OU to block inheritance of the RestrictU GPO. c. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO. d. Set the

c. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO.

Which of the following is true about GPOs? (Choose all that apply.) a. Local GPOs override domain GPOs. b. Domain GPOs are stored on member servers. c. Domain GPOs can be linked to Active Directory sites. d. The gpedit.msc tool can be used to edit local GPOs.

c. Domain GPOs can be linked to Active Directory sites. d. The gpedit.msc tool can be used to edit local GPOs.

Where is a GPT stored? a. In a folder with the same name as the GPO in the SYSVOL share b. In a folder with the same name as the GUID of the GPO in Active Directory c. In a folder with the same name as the GUID of the GPO in the SYSVOL share d. In a folder with the same name as the GPO in Active Directory

c. In a folder with the same name as the GUID of the GPO in the SYSVOL share

You have installed an application that can be configured with Group Policy. The application came with a custom ADM file that must be replicated to all DCs. What should you do first? a. Copy the file to %windir%\PolicyDefinitions. b. Open the file with an XML editor and save it. c. Open the file with ADMX Migrator. d. Change the extension to .inf.

c. Open the file with ADMX Migrator.

You want to deploy a software package that's available to all users in the domain if they want to use it, but you don't want the package to be installed unless a user needs it. How should you configure the software installation policy? a. Publish the package under the Computer Configuration node. b. Assign the package under the Computer Configuration node. c. Publish the package under the User Configuration node. d. Assign the package under the User Configuration node.

c. Publish the package under the User Configuration node.

You want to deploy a logon script by using Group Policy. You have several sites connected via a WAN with a DC at each site. You want to make sure the script is always available when users log on from any computer at any location. What should you do? a. Create a share on the fastest DC in the network and save the script there. b. Send the script via email to all users and have them save it locally. c. Save the script in the SYSVOL share. d. Copy the script to cloud storage.

c. Save the script in the SYSVOL share.

Which of the following is true about administering Group Policy on Azure AD DS? a. You can modify the Default Domain Policy GPO. b. There is no Default Domain Controllers Policy GPO. c. The administering account must be a member of the AADDC Administrators group. d. The administering account must be a member of the Enterprise Admins group.

c. The administering account must be a member of the AADDC Administrators group.

All your domain controllers are running Windows Server 2022. You're noticing problems with GPT replication. What should you check? a. Verify that Active Directory replication is working correctly. b. Verify that FRS is operating correctly. c. Verify that DFSR is operating correctly. d. Check the GPOReplication flag for the GPT in the Attribute Editor.

c. Verify that DFSR is operating correctly.

You have just finished configuring a GPO that modifies several settings on computers in the Operations OU and linked the GPO to the OU. You check on a few computers in the Operations Department and find that the policies haven't been applied. On one computer, you run gpupdate, and the policies are applied correctly. What's a likely reason the policies weren't applied to all computers when you tried to update them remotely? a. The Computer Configuration node of the GPO is disabled. b. A security filter that blocks the computer accounts has been set. c. The Operations OU has Block Inheritance set. d. Computers only apply GPO settings every 90 minutes or when the computer reboots.

d. Computers only apply GPO settings every 90 minutes or when the computer reboots.

You want to create policies in a new GPO that affect only computers with Windows 8 installed. You don't want to reorganize your computer accounts to do this, and you want computers that are upgraded to Windows 10 to fall out of the GPO's scope automatically. What can you do? a. For each policy, use selective application to specify Windows 8 as the OS. b. Create a new OU, place all computer accounts representing computers with Windows 8 installed in this OU, and link the GPO to this OU. c. Create a group called Win8Computers. Place all computer accounts representing computers with Windows 8 installed in this group, and use this group in a security filter on the GPO. Link the GPO to the domain. d. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain.

d. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain.

You want all users to have the company home page and two other websites loaded in tabs when they start the Microsoft Edge browser, but you want them to be able to change their home pages if they like. What should you do? a. Configure an IE policy and set it to unmanaged. b. Configure an Internet Options preference and accept the default options in the Common tab. c. Configure an IE policy and enable the Allow user changes option. d. Configure an Internet Options preference and change the default options in the Common tab.

d. Configure an Internet Options preference and change the default options in the Common tab.

Which of the following is a subfolder in the User Configuration node but not the Computer Configuration node of a GPO? a. Network b. Windows Components c. System d. Desktop

d. Desktop

You have configured a group policy preference that creates a VPN connection for all computers in the GPO's scope. One user says the connection was there yesterday, but it's no longer showing in his Network Connections window. You suspect he might have deleted the connection accidentally. What can you do to make sure the VPN connection is re-created even if a user deletes it? a. Disable the "Remove this item when it is no longer valid" option. b. Configure the Read-only option. c. Configure item-level targeting. d. Disable the "Apply once and do not reapply" option.

d. Disable the "Apply once and do not reapply" option.

Which of the following represents the correct order in which GPOs are applied to an object that falls within the GPO's scope? a. Site, domain, OU, local GPOs b. Local GPOs, domain, site, OU c. Domain, site, OU, local GPOs d. Local GPOs, site, domain, OU

d. Local GPOs, site, domain, OU