CTEC305 Cengage QUIZ4,

An administrative template file using what file extension provides a language specific user interface in the Group Policy Management Editor?

.adml

By default how many previous logons are cached locally to a computer?

10

By default, how many previous logons are cached locally to a computer

10

A user is signed in to a Windows Server 2016 domain from a Windows 10 computer and requests access to a shared folder. What must the user account request before the shared folder can be accessed?

A service ticket

Which of the following can be used by a Windows Server 2016 administrator to create a PSO? (Choose all that apply.)

ADAC ADSI Edit PowerShell

Which of the following is true about GPOs?

Account policies are under the Computer Configuration node.

Which of the following is best described as policy definition files saved in XML format?

Administrative templates

In your Windows Server 2016 domain, you have a member server also running Windows Server 2016. You want to install the LocSvc service, which will be accessing only local resources. You need to configure authentication for this service but don't want to use one of the built-in service accounts and want to do this with the least administrative effort. What should you do?

Configure the service to log on as NT Service\LocSvc.

Under the Computer Configuration, which folder contains settings related to the Regional and Language Options, User Accounts, and Personalization options?

Control Pannel

A group of users in the Research Department has access to sensitive company information, so you want to be sure that the group members' passwords are strong with a minimum length of 12 characters and a requirement to change their passwords every 30 days. The current password policy requires passwords with a minimum length of 7 characters that users must change every 120 days. You don't want to inconvenience other users in the domain by making their password policies more stringent. What can you do?

Create a PSO in ADAC, configure the password policy, and apply it to the Research Department group.

You have four servers running a service in a load-balancing configuration, and you want the services on all four servers to use the same service account. What should you do?

Create a group and add the servers' computer accounts to it. Run the New-ADServiceAccount cmdlet

You have been working with ADMX files to modify existing Administrative Templates and create new templates. You work on different domain controllers, depending on your location. Despite a concerted effort, your ADMX files are getting out of sync. How can you solve this problem?

Create an ADMX store in the SYSVOL share, and copy the ADMX files to the ADMX store

Which of the following GPOs are created by default when Active Directory is installed? (Choose all that apply.)

Default Domain Controllers Policy Default Domain Policy

Which of the following best describes the Account lockout threshold setting?

Defines the number of times a user's password can be entered incorrectly

Which of the following is a subfolder in the User Configuration node but not the Computer Configuration node of a GPO

Desktop

You have configured a group policy preference that creates a VPN connection for all computers in the GPO's scope. One user says the connection was there yesterday, but it's no longer showing in his Network Connections window. You suspect he might have deleted the connection accidentally. What can you do to make sure that the VPN connection is re-created even if a user deletes it?

Disable the Apply once and do not reapply option

What Active Directory replication method makes use of remote differential compression (RDC)?

Distributed File System Replication (DFSR)

A managed service account(MSA) enables administrators to manage rights and permissions for service but strict manual passwords management policies

False

A published application can be installed automatically

False

The Security Configuration an Analysis Snap-in can not be used to apply a template to a computer

False

Which of the following service accounts can be managed across multiple servers?

Group managed service account

Where is a GPT stored?

In a folder named the same as the GUID of the GPO in the SYSVOL share

You need to find a policy related to an application that was installed several years ago. You know that the policy is persistent when the computer that it's applied to falls out of scope, but you can't remember its name. You remember a word or two that might be in the policy name or comments. What can you do to find this policy quickly

In the Group Policy Management Editor, configure a filter; set Managed to No, and enable Keyword Filters.

You have created a custom administrative template. You want this template to be available to all DCs so that policies can be configured with it from any DC. Where should you save it?

In the central store

What components of Kerberos is responsible for storing keys for encrypting and decrypting data in the authentication process?

Key Distribution Center

Select below the option that is not one of the three built-in service account

Local Operator

Which of the following are built-in service accounts? (Choose all that apply.)

Local System Network Service

You're configuring a web-based intranet application on the WebApp server, which is a domain member. Users authenticate to the web-based application, but the application needs to connect to a back-end database server, BEdata, on behalf of users. What should you configure

On a domain controller, configure constrained delegation on the service account.

You have created an MSA on DC1 to run a service on the ldsServ1 server. What's the last thing you should do before using the Services MMC to configure the service to use the new MSA?

On ldsServ1, run the Install-ADServiceAccount cmdlet.

You have installed an application that can be configured with Group Policy. The application came with a custom ADM file that must be replicated to all DCs. What should you do first?

Open the file with ADMX Migrator

Which of the following is included in account policies for a GPO? (Choose all that apply.)

Password Policy Kerberos Policy Account Lockout Policy

A junior administrator is configuring settings for the Password Policy of a new GPO he created and sets the minimum password length to 4. He links the GPO to the EngUsers OU containing the user and group accounts for the Engineering Department. A user in the Engineering Department calls and says he's trying to change the password on his domain user account to A$c1, but the system isn't taking the new password. What's the problem?

Password policies can be set only at the domain level.

You want to deploy a logon script by using Group Policy. You have several sites connected via a WAN with a DC at each site. You want to make sure the script is always available when users log on from any computer at any location. What should you do?

Save the script in the SYSVOL share

For automatic SPN support, what must the domain functional level be?

Windows server 2008 R2 or Higher

Which of the following are advantages of using a managed service account instead of a regular user account for service logon? (Choose all that apply.)

You can't be locked out. The system manages passwords.

What tool within Windows Server 2016 must be used in order to change the default auditing setting?

auditpol.exe

How can an administrator remove all audit policy subcategories so that auditing is controlled only by Group Policy?

auditpol/Clear

What option limits the delegation to specific services running on specific computers

constrained delegation

Command scripts are just a series of command saved in a file with a bat extension.

true

the Default Domain Policy is linked to the domain object and specifies default settings that affect all users and computers in the domain

True

Which of the following is used to uniquely identify a service instance to a client?

SPN

If you want a security template using a baseline of settings from an existing desktop computer or sever, you can begin by opening secpol.msc

True

The Default Domain Policy is linked to the domain object and specifies default settings that affect all users and computers in the domain

True

The folders containing Group Policy Templates (GPTs) can be found under what folder on a domain controller?

%systemroot%\SYSVOL\sysvol\domain\Policies

Which of the following are local GPOs on a Windows 10 computer? (Choose all that apply.)

-Local Non-Administrators Local Administrators

Which of the following are methods for creating a GPO?

-Use the Group Policy Objects folder of the Group Policy Management console -Link it to a container

How can an administrator test an MSA to ensure that it can access the domain with its current credentials, or can be installed on a member

By using the Test-ADSServiceAccount cmdlet

You discovered that a user changed his password 10 times in one day. When you ask why he did this, he replied that the system required him to change his password. He wanted to use his favorite password, but the system wouldn't accept it until he changed it 10 times. What should you do to prevent this user from reusing the same password for at least 60 days?

Change the value for the Minimum password age setting.

You're having replication problems with your GPOs and suspect that the version numbers have somehow gotten out of sync between the GPT and the GPC. What can you do to verify the version numbers on a GPO?

Check the versionNumber attribute of the GPC and open the GPT.ini fiLE

You want all users to have the company home page and two other Web sites loaded in tabs when they start Internet Explorer, but you want them to be able to change their home pages if they like. What should you do?

Configure an Internet Options preference, and change the defaults in the Common tab

You want to centrally back up the files that users store in the Documents folder in their user profiles, but you don't want users to have to change the way they access their files. What's the best way to go about this?

Configure folder redirection in the User Configuration node of a GPO

You want to set a group policy preference that affects only computers with a CPU speed of at least 4.0 GHz. What's the best way to do this?

Configure item-level targeting

You want to deploy a software package that's available to all users in the domain if they want to use it, but you don't want the package to be installed unless a user needs it. How should you configure the software installation policy?

Publish the package under the User Configuration node

You're concerned that some domain controllers and workstations don't meet security requirements. What should you do to verify security settings on a computer against a list of known settings?

Run Security Configuration and Analysis on the computer to compare its security settings against a security database

Where are user accounts stored on a standalone computer?

SAM Database

Which of the following are true about GPOs? (Choose all that apply.)

The <CTX>gpedit.msc </CTX> tool can be used to edit local GPOs. Domain GPOs can be linked to Active Directory sites.

You have configured a policy setting in the User Configuration node of a domain GPO and linked the GPO to OU-X. Later, you discover that you linked it to the wrong OU, so you unlink it from OU-X and link it to OU-Y, which is correct. A few days later, you find that users in OU-X still have the policy setting applied to their accounts. What's the most likely cause of the problem?

The policy setting is unmanaged

You're the network administrator for several Windows Server 2016 servers in New York. Your company just opened an office in California, and you sent one of the servers to the new office. The server was up and running within 2 days after you sent it. Now you're having authentication problems between the server in California and the domain controllers in New York. There's nothing wrong with the WAN connection, and you never had problems with the California server before, which seems to operate okay in every other way. What's a possible cause of this problem?

The time zone on the California server needs to be changed

Which of the following are the main functions of user accounts? (Choose all that apply.)

User authentication Detailed information

All your domain controllers are running Windows Server 2016. You're noticing problems with GPT replication. What should you do?

Verify that DFSR is operating correctly