4.2.12 Practice Questions

What is the name of the service included with the Windows Server operating system that manages a centralized database containing user account and security information?

Active Directory

You manage a large number of workstations that belong to a Windows domain. You want to prevent anyone that might try to gain access to a computer from guessing login information by trying multiple passwords. Which GPO contains a policy you can enable to guard all computers in the domain against this security breach?

Default Domain Policy

A user has complained about not being able to remove a program that is no longer needed on a computer. The Programs and Features page is not available in Control Panel. You suspect that a policy is enabled that hides this page from the user. But after opening the Local Group Policy Editor, you see that the Hide Programs and Features page is set to Not configured. You know that other users in this domain can access the Programs and Features page. To determine whether the policy is enabled, where should you look next?

GPOs linked to organizational units that contain this user's object.

Match each Active Directory term on the left with its corresponding definition on the right. Logical organization of resources

A tree is a group of related domains A forest is a collection of related domain trees. A domain is collection of network resources An organizational unit is like a folder; it subdivides and organizes network resources within a domain. An object is a network resource as identified within Active Directory.

When you create a computer object in Active Directory (using the Active Directory Users and Computers (ADUC) console, you need to enter a Computer name. Which of the following is a requirement for the Computer object name?

It needs to match the Computer name that was provided during Windows Setup.

You are managing a workstation that is not part of a Windows domain. Users on this computer should not be permitted to download applications from the Windows Store. Which administration tool can you use to enable a policy that turns off the Store application for all users on this computer?

Local Group Policy Editor

Drag each Group Policy setting on the left to the description of how the setting is enforced on the right.

Not configured has no value and does not change the current setting for this policy. Enabled causes the policy to be enforced. Disabled prevents the policy from being enforced.

You're the systems administrator for an international trading company. You've just enabled the Active Directory Domain Services (AD DS) role, and you now have access to the Active Directory Users and Computers (ADUC) console to begin creating Computer objects in Active Directory. You want to create a WIN10COM01 Computer object using the ADUC console. Which of the following can you create and store the Computer object in? (Select two.)

Organizational unit (OU) Computers container

After logging in, the user is able to see the Programs and Features page. Why does this happen?

The GPO linked to the user's organizational unit is applied last, so that this setting takes precedence.

You have several computers running Windows 10. The computers are members of a domain. For all computers, you want to remove access to administrative tools from the Start menu and hide notifications from the System Tray. What should you do?

Use Group Policy