CNIT 242 Group Policy and Name Resolution

Which of the following is not a way in which an administrator can control group policy inheritance: a.) Inheritance can be blocked for a GPO - forcing a child GPO to apply regardless of conflict b.) Inheritance can be forced to override lower level GPOs - forcing a parent GPO to apply regardless of conflict c.) Inheritance can be disabled domain-wide d.) All of these are ways in which an administrator can control group policy inheritance

Answer: -C Inheritance can be blocked or forced, but not disabled throughout the domain

Your PC can communicate with a web server using the IP address (i.e. 157.166.255.236), but not through fully qualified domain name (FQDN, i.e. www.ncaa.com). What might be wrong? A) The web server is malfunctioning B) The configured DNS Server of the PC is malfunctioning C) Your PC is misconfigured to use a non-existing DNS server. D) B & C E) All of the above could be the reason for the problem

Answer: -D) B & C Correct - The DNS server you are querying is nonexistent, malfunctioning, or misconfigured. Other issues could include network connectivity between the DNS server and the authoritative server, or an issue with an intermediate or authoritative server

T/F: The best approach to implementing group policy is to create/modify one policy per OU that contains all of the applicable settings.

Answer: -F The best approach is to create separate policies for each setting and link them to applicable OUs. This creates a single point of administration for each policy. By making a change to the policy it will affect all OUs linked to the policy.

T/F: Special Characters, such as ?*"\ can be used in NetBios Name.

Answer: -F \/:*?";|+˽Cannot be used in a NETBIOS name

GPO settings are set to which of the following by default? Not Configured Enabled Disabled Enforced

Answer: -Not configured All GPO entries are set to "not configured" by default.

T/F: A computer's NetBIOS name and DNS hostname are independent. However, they should be set to the same value.

Answer: -T A computer's NetBIOS name and DNS hostname should be set to the same value.

T/F: Windows Active Directory can work with most DNS servers as long as they support dynamic updates.

Answer: -T As long as a DNS server includes dynamic update capability it can be used with Active Directory.

T/F: By default, if an eabled GPO setting in the parent OU conflicts with an enabled GPO setting in the child OU, the GPO setting in the child OU wins.

Answer: -T The GPOs are applied in order from the root to the object. If both the parent OU and child OU have a setting applied, the parent setting with be applied, then the child setting will be applied. If effect, the child setting would "win" in this scenario.

T/F: DNS, as currently deployed, has no formal security included.

Answer: -T There is no authentication, authorization, non-repudiation, or encryption in DNS.

What are the two components (items to which the policy can effect) to a Group Policy Object (GPO)?

Answer: -user -computer