Ch 5

An OU structure in your domain has one OU per department, and all the computer and user accounts are in their respective OUs. You have configured several GPOs defining computer and user policies and linked the GPOs to the domain. A group of managers in the Marketing Department need different policies that differ from those of the rest of the Marketing Department users and computers, but you don't want to change the top-level OU structure. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. GPO enforcement c. WMI filtering d. loopback processing

a. Block inheritance

You want to create policies in a new GPO that affect only computers with Windows 8 installed. You don't want to reorganize your computer accounts to do this, and you want computers that are upgraded to Windows 10 to fall out of the GPO's scope automatically. What can you do? a. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain. b. Create a new OU, place all computer accounts representing computers with Windows 8 installed in this OU, and link the GPO to this OU. c. Create a group called Win8Computers. Place all computer accounts representing computers with Windows 8 installed in this group and use this group in a security filter on the GPO. Link the GPO to the domain. d. For each policy, use selective application to specify Windows 8 as the OS.

a. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain.

You have a branch office connected to the main office with a sometimes unreliable and slow WAN link. Users are complaining about long logon times. Which Group Policy client feature are you most likely to configure to solve the problem? a. Slow link processing b. Background processing c. Synchronous processing d. Remote update processing

a. Slow link processing

What kind of group policy processing always occurs when a user is logged on to the computer at the time a group policy refresh occurs? a. Foreground processing b. Background processing c. Selective processing d. Slow link processing

b. Background processing

To find a full list of policies and preferences that can have background processing disabled, where should you look? a. Computer Configuration\Policies\Administrative Templates\Group Policy b. Computer Configuration\Policies\Administrative Templates\System\Group Policy c. User Configuration\Policies\Administrative Templates\Group Policy d. User Configuration\Policies\Administrative Templates\System\Group Policy

b. Computer Configuration\Policies\Administrative Templates\System\Group Policy

A slow link, by default, is a network connection that's less than which of the following? a. 500 Kbps b. 500 Mbps c. 1 Gbps d. 10 Gbps

a. 500 Kbps

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU's settings, but all other policy settings are still in effect for them. What's the best way to proceed? a. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO. b. Create an OU under Operations and move the three users to this new OU. Create a GPO and link it to this new OU. Configure the new OU to block inheritance of the RestrictU GPO. c. Move the three users to a new OU. Create a GPO with settings suitable for the three users, and link it to the new OU. d. Set the Enforced option on RestrictU with a WMI filter that excludes the three user accounts.

a. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO.

You manage a multidomain forest with domains named DomainA and DomainB. You want to use the GPOs from DomainA in DomainB without having to reconfigure all GPOs. What do you need to configure? a. Migration table b. Delegation c. GPO backup and restore d. RSoP

a. Migration table

You manage a multidomain forest with domains named DomainA and DomainB. You want to use the GPOs from DomainA in DomainB without having to reconfigure all GPOs. What do you need to configure? a. Migration table b. GPO backup and restore c. Delegation d. RSoP

a. Migration table

Which tab of the Group Policy Results window shows all events in Event Viewer that are generated by group policies, and can be used to view the relevant information on a remote computer? a. Policy events b. Details c. Log entries d. Summary

a. Policy events

You were hired to fix problems with group policies at a company. You open the GPMC to look at the default GPOs and see that extensive changes have been made to both. You want to restore settings to a baseline so that you know where to start. What should you do? a. Run gpofix. b. Run gpupdate /revert. c. Delete the default GPOs and create new gPOs with the same names. d. Create a domain and use GPO migration.

a. Run gpofix.

Users who log on from a branch office connected to the DC via a slow WAN link are complaining of slow logon times when you assign applications via group policies. What can you do to speed their logons? a. Disable Group Policy caching. b. Configure synchronous processing when a slow link is detected. c. Perform a remote group policy update. d. Configure asynchronous processing when a slow link is detected.

d. Configure asynchronous processing when a slow link is detected.

Select the GPO permission that provides the ability to change existing settings, import settings, and enable or disable a GPO, but is not granted to any user by default? a. Read b. Link GPOs c. Create GPOs d. Edit settings

d. Edit settings

What mode of the Resultant Set of Policy (RSoP) snap-in produces a database of policy results that you browse in a similar manner to using the Group Policy Management Editor? a. Testing b. Processing c. Planning d. Logging

d. Logging

A junior administrator deleted a GPO accidentally, but you had backed it up. What should you do to restore the deleted GPO? a. Create a GPO, right-click the new GPO, and click Restore from Backup. b. Right-click the GPO backup file in File Explorer and click Restore. c. Open the Active Directory Recycle Bin, right-click the GPO object, and click Restore. d. Right-click the Group Policy Objects folder and click Manage Backups.

d. Right-click the Group Policy Objects folder and click Manage Backups.

Which policy below requires synchronous processing to ensure a consistent computing environment? a. Wireless network policies b. Wired network policies c. Script policies d. Software installation policies

d. Software installation policies

Select the term used to describe forcing inheritance of settings on all child objects in the GPO's scope, even if the GPO with conflicting settings is linked to a container at a deeper level. a. object enforcement b. GPO enforcement c. forced inheritance d. scope enforcement

b. GPO enforcement

You have created a GPO that sets certain security settings on computers. You need to make sure that these settings are applied to all computers in the domain. Which of the following GPO processing features are you most likely to use? a. WMI filtering b. GPO enforcement c. Block inheritance d. Loopback processing

b. GPO enforcement

You don't have policies that force settings for the look of users' computer desktops. Each user's chosen desktop settings are applied from his or her roaming profile to any computer he or she signs in to. You think it's important for users to have this choice, but you'd like a consistent look for computers used for product demonstrations to customers. What's the best way to do this without affecting users when they sign in to other computers? a. Create a user named Demo. Configure Demo's desktop settings and use only this user account to sign in to demonstration computers. b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers. c. Create a GPO with a startup script that configures desktop settings suitable for demonstration computers when these computers are started. Link the GPO to the OU containing the demonstration computers. Instruct users to restart demonstration computers before using them. d. Configure desktop policies in the Computer Configuration node of a GPO and link this GPO to the OU containing the demonstration computers.

b. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers.

Select the specific tab within the Group Policy Management Console that will allow you to view which policies affect a domain or OU and where the policies are inherited from. a. Group Policy Delegation b. Group Policy Inheritance c. Group Policy Management d. Group Policy Details

b. Group Policy Inheritance

An administrator would like to configure a computer to load policy information that is stored locally to speed system startup. What client-side feature should the administrator select ? a. Network Location Awareness b. Group Policy caching c. WMI filtering d. Locals processing

b. Group Policy caching

You need to move some user and computer accounts in Active Directory, but before you do, you want to know how these accounts will be affected by the new group policies they'll be subject to. What can you do? a. Run secedit.exe with the planning option. b. Run Group Policy Modeling. c. Run RSoP in logging mode. d. Run Group Policy Results.

b. Run Group Policy Modeling.

If the slow link detection policy is set at 0, what does this indicate? a. All links are considered slow links b. Slow link detection is disabled c. Slow links are detected via metric rather than throughput d. Slow links are designed manually

b. Slow link detection is disabled

Which of the following represents the correct order in which GPOs are applied to an object that falls within the GPO's scope? a. Local GPOs, domain, site, OU b. Site, domain, OU, local GPOs c. Local GPOs, site, domain, OU d. Domain, site, OU, local GPOs

c. Local GPOs, site, domain, OU

You have just finished configuring a GPO that modifies several settings on computers in the Operations OU and linked the GPO to the OU. You right-click the Operations OU and click Group Policy Update. You check on a few computers in the Operations department and find that the policies haven't been applied. On one computer, you run <CTX> gpupdate </CTX> and find that the policies are applied correctly. What's a likely reason the policies weren't applied to all computers when you tried to update them remotely? a. A security filter that blocks the computer accounts has been set. b. The Operations OU has Block Inheritance set. c. You need to configure the firewall on the computers. d. The Computer Configuration node of the GPO is disabled.

c. You need to configure the firewall on the computers.

You want to create an HTML report that shows which policies and GPOs are applied to a particular user and computer. Which command should you use? a. Invoke-GPReport b. rsop c. gpresult d. gpupdate

c. gpresult

Which of the following uses permissions to restrict objects from accessing a GPO? a. GPO status b. WMI filtering c. security filtering d. blocking enforcement

c. security filtering

You have just made changes to a GPO that you want to take effect as soon as possible on several user and computer accounts in the Sales OU. Most of the users in this OU are currently signed in to their computers. There are about 50 accounts. What's the best way to update these accounts with the new policies as soon as possible? a. Use the gpupdate /target:Sales /force command. b. Configure the GPO to perform foreground processing immediately. c. Configure a script preference that runs <CTX>gpupdate</CTX> the next time the user signs out. d. Run the Get-ADComputer and Invoke-GPUpdate PowerShell cmdlets.

d. Run the Get-ADComputer and Invoke-GPUpdate PowerShell cmdlets.