Comptia 220-801 12.4.12 Practice Test Questions
You are the owner of a small startup company consisting of only five employees. Each employee has their own computer. Due to the type of services your company offers, you don't foresee the employee count increasing much in the next year or two. As a startup company, you want to keep costs low and facilitate easier file sharing, internet access, printers, and other local network resources. Which of the following would be the BEST implementation for your business?
A workgroup If you only have five PCs and the network is not growing, a Windows workgroup will let you organize your computers in a peer-to-peer network. This workgroup network lets you share files, internet access, and printers between the five employees. A domain would do the same thing, but in this case, it is not a good idea because Windows Server brings in a bunch of new costs and complexity that probably wouldn't pay off for such a small company. In addition, you are introducing a single point of failure, the server. Trees and forests are subsets, or components, of a domain.
What is the name of the service included with the Windows Server operating system that manages a centralized database containing user account and security information?
Active Directory Active Directory (AD) is the centralized database that is included with the Windows Server operating system. Active Directory is used to store information about a network, such as user accounts, computers, printers, and security policies. SQL and Access are relational databases. Active Desktop was a feature of early versions of Microsoft Internet Explorer.
Drag the group policy setting on the left to the appropriate description of how the setting is enforced on the right. Causes the policy to be enforced Does not change the current setting for the policy Prevents the policy from being enforced
Causes the policy to be enforced Enabled Does not change the current setting for the policy Not configured Prevents the policy from being enforced Disabled Each policy can be configured using one of the following settings: Not Configured has no value and does not change the current setting for this policy. Enabled causes the policy to be enforced. Disabled prevents the policy from being enforced.
You manage a group of 20 Windows workstations that are currently configured as a workgroup. You have been thinking about switching to an Active Directory configuration. Which advantages would you gain by switching to Active Directory? (Select TWO.)
Centralized configuration control Centralized authentication Installing an Active Directory database provides several advantages: Improved scalability Centralized configuration control Reduced data backup complexity Centralized authentication Centrally applied security settings Active Directory also include some drawbacks: Increased cost Specialized hardware and software needed Increased planning time for implementation
You manage a large number of workstations that belong to a Windows domain. You want to prevent anyone that might try to gain access to a computer from guessing login information by trying multiple passwords. Which default GPO contains a policy you can enable to guard all computers in the domain against this security breach?
Default Domain Policy The Default Domain Policy GPO contains a policy you can enable for all computers in a domain that prevents anyone from trying multiple passwords to see if they can guess login information. Group Domain Policy, Group Security Policy, and Domain Security Policy are not default GPOs in Active Directory.
Match the Active Directory definition on the left with its corresponding term on the right. (Some definitions do not have an associated term on the right.) Domain Controller Site Subnet Forest Root Domain Tree Root Domain
Domain Controller A server that holds a copy of the Active Directory database that can be written to. Site Represents a group of networks that are connected with high-speed links. Subnet Represents a physical network segment. Forest Root Domain The first domain created in an Active Directory forest. Tree Root Domain The highest-level domain in a tree. The Active Directory structure contains the following components: A tree is a group of related domains that share the same contiguous DNS namespace. A forest is a collection of related domain trees. A domain is an administratively-defined collection of network resources that share a common directory database and security policies. An organizational unit is like a folder that subdivides and organizes network resources within a domain. An object is a network resource as identified within Active Directory.
A user has complained about not being able to remove a program that is no longer needed on a computer. The Programs option is not available in Control Panel. You suspect that a policy is enabled that hides this option from the user. But after opening the Local Group Policy Editor, you see that the policy to hide Programs is not configured. You know that other users in this domain can access the Programs option. To determine whether the policy is enabled, where should you look next?
GPOs linked to organizational units that contain this user's object. You should look at GPOs linked to organizational units that contain this user's object to see where the Hide Programs and Features Page policy might be enabled. If the policy was enabled in a GPO linked to the domain, it would be applied to all users in the domain. The next level GPOs are applied from is GPOs linked to organizational units that contain the user's object.
You are managing a workstation that is not part of a Windows domain. Users on this computer should not be permitted to download applications from the Windows Store. Which administration tool can you use to enable a policy that turns off the Store application for all users on this computer?
Local Group Policy Editor The Local Group Policy Editor is the administration tool used to enable local computer behavior policies and the tasks users are allowed to perform. Therefore, the policy that turns off the Store application for all users on this computer would is found under computer configuration settings. Under Programs, you can uninstall, change, or repair applications that are already installed. Control Panel can be used to access many administration tools, but none that are used to edit group policies. Windows Firewall can be used to deny or allow network traffic access to the computer, but not to enable group policies. The Settings app does not provide group policy administration tools.
Match each Active Directory term on the left with its corresponding definition on the right. Logical organization of resources Collection of network resources Collection of related domain trees Network resource in the directory Group of related domains
Logical organization of resources Organizational unit Collection of network resources Domain Collection of related domain trees Forest Network resource in the directory Object Group of related domains Tree The Active Directory structure includes the following components: A tree is a group of related domains that share the same contiguous DNS namespace. A forest is a collection of related domain trees. A domain is an administratively-defined collection of network resources that share security policies and a common directory database. An organizational unit is like a folder; it subdivides and organizes network resources within a domain. An object is a network resource as identified within Active Directory.
A new computer has been added to the Sales department and needs to be joined to the CorpNet domain. Which of the following System Properties settings MUST be used to make the change?
System Properties > Computer Name The Computer Name tab lets you view, change, or join a computer to a domain. The System Protection tab lets you configure and create system restore points. The Advanced tab lets you configure settings such as Performance, User Profiles, and Startup and Recovery. The Remove tab lets you configure Remote Assistance and Remote Desktop settings.
The Hide Programs option setting is configured for a specific user as follows: Policy Setting Local Group Policy Enabled Default Domain Policy GPO Not configured GPO linked to the user's organizational unit Disabled After logging in, the user is able to see the Programs option. Why does this happen?
The GPO linked to the user's organizational unit is applied last, so this setting takes precedence. The GPO linked to the user's organizational unit is applied last, so the setting that disables the policy to the hide the Programs and Features page takes precedence. In this question's scenario, Local Group Policy enables the policy to hide the Programs and Features page. When the Default Domain Policy GPO is applied, this policy is set to Not configured, so it doesn't change anything. When the GPO linked to the user's organizational unit is applied, the setting for this policy is disabled, which reverses the setting in the Local Group Policy and makes the Programs and Features page visible to the user. The Local Group Policy is applied first. GPOs linked to the user's domain are applied second and take precedence over settings in the Local Group Policy. GPOs linked to the user's organizational unit are applied last and take precedence over any preceding policy settings.
You are an IT administrator troubleshooting a Windows-based computer. After a while, you determine that you need to refresh the group policy on that computer. Rather than rebooting the computer, you open a command prompt from which the refresh can manually be completed. Which of the following is the BEST command line tool to run to accomplish this task?
gpupdate gpupdate refreshes the local and Active Directory-based Group Policy settings, including security settings. gpresult only displays the Group Policy settings and Resultant Set of Policy (RSOP) for a user or a computer. fsutil displays or configures the file system properties. assoc displays or modifies file extension associations. popd restores the previous value of the current directory saved by pushd.
