Unit 5: Managing Group Policies

An OU structure in your domain has one OU per department, and all the computer and user accounts are in their respective OUs. You have configured several GPOs defining computer and user policies and linked the GPOs to the domain. A group of managers in the Marketing Department need different policies that differ from those of the rest of the Marketing Department users and computers, but you don't want to change the top-level OU structure. Which of the following GPO processing features are you most likely to use? a. Block inheritance b. WMI filtering c. Loopback processing d. GPO enforcement

a

The PowerShell cmdlet Import-GPO can be used to perform which of the following functions? a. Imports settings from a backed-up GPO to an existing GPO b. Links a GPO to a site, domain or OU c. Displays a list of all group policy-related cmdlets d. Gets information about one GPO or all GPOs in the domain e. None of these are correct

a

Users who log on from a branch office connected to the DC via a slow WAN link are complaining of slow logon times when you assign applications via group policies. What can you do to speed their logons? a. Configure asynchronous processing when a slow link is detected b. Perform a remote group policy update c. Configure synchronous processing when a slow link is detected d. Disable Group Policy caching

a

What kind of group policy processing always occurs when a user is logged on to the computer at the time a group policy refresh occurs? a. Background processing b. Selective processing c. Slow link processing d. Foreground processing

a

When a user signs-in to a domain, which of the following is the correct processing order for Group Policy Objects? a. Local computer > Site > Domain > Organizational Unit (OU) b. Domain > Site >Organizational Unit (OU) > Local computer c. Site > Domain > Organizational Unit (OU) > Local computer d. Local computer > Organizational Unit (OU) > Site > Domain

a

Which of the following represents the correct order in which GPOs are applied to an object that falls within the GPO's scope? a. Local GPOs, site, domain, OU b. Domain, site, OU, local GPOs c. Site, domain, OU, local GPOs d. Local GPOs, domain, site, OU

a

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU's settings, but all other policy settings are still in effect for them. What's the best way to proceed? a. Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO. b. Move the three users to a new OU. Create a GPO with settings suitable for the three users, and link it to the new OU. c. Create an OU under Operations, and move the three users to this new OU. Create a GPO and link it to this new OU. Configure the new OU to block inheritance of the RestrictU GPO. d. Set the Enforced option on RestrictU with a WMI filter that excludes the three user accounts.

a

You have created a GPO that sets certain security settings on computers. You need to make sure that these settings are applied to all computers in the domain. Which of the following GPO processing features are you most likely to use? a. GPO enforcement b. Block inheritance c. Loopback processing d. WMI filtering

a

You have just made changes to a GPO that you want to take effect as soon as possible on several user and computer accounts in the Sales OU. Most of the users in this OU are currently signed in to their computers. There are about 50 accounts. What's the best way to update these accounts with the new policies as soon as possible? a. Run the Get-ADComputer and Invoke-GPUpdate PowerShell cmdlets. b. Use the gpupdate /target:Sales /force command. c. Configure the GPO to perform foreground processing immediately. d. Configure a script preference that runs gpupdate the next time the user signs out.

a

You want to create policies in a new GPO that affect only computers with Windows 8 installed. You don't want to reorganize your computer accounts to do this, and you want computers that are upgraded to Windows 10 to fall out of the GPO's scope automatically. What can you do? a. Configure a WMI filter on the GPO that specifies Windows 8 as the OS. Link the GPO to the domain. b. For each policy, use selective application to specify Windows 8 as the OS. c. Create a new OU, place all computer accounts representing computers with Windows 8 installed in this OU, and link the GPO to this OU. d. Create a group called Win8Computers. Place all computer accounts representing computers with Windows 8 installed in this group and use this group in a security filter on the GPO. Link the GPO to the domain.

a

An administrator has just backed up a GPO to save specific policy settings. Which of the following additional settings and information were also backed up in this procedure? (Choose all that apply.) a. Delegation settings b. Security filtering settings c. Network Policy Updates d. WMI filter links

a, b, d

After a GPO is created, which of the following are possible states for the new GPO? (Choose all that apply.) a. GPO status: Enabled b. GPO status: Unlinked c. Link status: Enabled d. GPO status: All Settings Disabled

a, c, d

To which of the computers is the loopback processing intended to be applied? [Choose all that apply.] a. Kiosks b. Production servers c. Classroom system d. Laboratories systems e. Production systems

a, c, e (?)

The PowerShell cmdlet New-GPlink can be used to perform which of the following functions? a. Imports settings from a backed-up GPO to an existing GPO b. Links a GPO to a site, domain or OU c. Displays a list of all group policy-related cmdlets d. Gets information about one GPO or all GPOs in the domain e. None of these are correct

b

You need to move some user and computer accounts in Active Directory, but before you do, you want to know how these accounts will be affected by the new group policies they'll be subject to. What can you do? a. Run Group Policy Results. b. Run Group Policy Modeling. c. Run secedit.exe with the planning option. d. Run RSoP in logging mode.

b

You were hired to fix problems with group policies at a company. You open the GPMC to look at the default GPOs and see that extensive changes have been made to both. You want to restore settings to a baseline so that you know where to start. What should you do? a. Run gpupdate /revert. b. Run gpofix. c. Delete the default GPOs and create new GPOs with the same names. d. Create a domain and use GPO migration.

b

No computers in an OU seem to be getting computer policies from the GPO linked to the OU, but users in the OU are getting user policies from this GPO. Which of the following are possible reasons that computer policies in the GPO aren't affecting the computers? (Choose all that apply.) a. The GPO link is disabled. b. The Computer Configuration settings are disabled. c. The computer accounts have Deny Read permission. d. The OU has the Block Inheritance option set.

b, c

Which two features allow an administrator to limit the application of GPOs based on user group membership in a domain and system hardware settings of a computer? [Choose two that apply.] a. Block Inheritance b. Security Filtering c. Windows Management Instrumentation (WMI) filtering d. Group Policy Modeling

b, c

An administrator would like to configure a computer to load policy information that is stored locally to speed system start-up. What client-side feature should the administrator select? a. Locals processing b. Network Location Awareness c. Group Policy caching d. WMI filtering

c

The PowerShell cmdlet Get-Command-module GroupPolicy can be used to perform which of the following functions? a. Imports settings from a backed-up GPO to an existing GPO b. Links a GPO to a site, domain or OU c. Displays a list of all group policy-related cmdlets d. Gets information about one GPO or all GPOs in the domain e. None of these are correct

c

Which of the following are additional configurable settings that provide item-level targeting and action modes (create, delete and update)? a. Filters b. Registry settings c. Preferences d. Policies

c

Which of the following version of Windows is being referred to when it is labeled as 6.3? a. Windows 8 b. Windows 7 c. Windows 8.1 d. Windows 10

c

You don't have policies that force settings for the look of users' computer desktops. Each user's chosen desktop settings are applied from his or her roaming profile to any computer he or she signs in to. You think it's important for users to have this choice, but you'd like a consistent look for computers used for product demonstrations to customers. What's the best way to do this without affecting users when they sign in to other computers? a. Create a GPO with a start-up script that configures desktop settings suitable for demonstration computers when these computers are started. Link the GPO to the OU containing the demonstration computers. Instruct users to restart demonstration computers before using them. b. Configure desktop policies in the Computer Configuration node of a GPO and link this GPO to the OU containing the demonstration computers. c. Configure loopback policy processing in Computer Configuration. Configure the desktop settings in User Configuration and link the GPO to the OU containing the demonstration computers. d. Create a user named Demo. Configure Demo's desktop settings and use only this user account to sign in to demonstration computers.

c

You have a branch office connected to the main office with a sometimes unreliable and slow WAN link. Users are complaining about long logon times. Which Group Policy client feature are you most likely to configure to solve the problem? a. Remote update processing b. Synchronous processing c. Slow link processing d. Background processing

c

You manage a multidomain forest with domains named DomainA and DomainB. You want to use the GPOs from DomainA in DomainB without having to reconfigure all GPOs. What do you need to configure? a. Delegation b. GPO backup and restore c. Migration table d. RSoP

c

A junior administrator deleted a GPO accidentally, but you had backed it up. What should you do to restore the deleted GPO? a. Right-click the GPO backup file in File Explorer and click Restore. b. Create a GPO, right-click the new GPO, and click Restore from Backup. c. Open the Active Directory Recycle Bin, right-click the GPO object, and click Restore. d. Right-click the Group Policy Objects folder and click Manage Backups.

d

The New-GPO cmdlet can be used to facilitate which of the following functions in PowerShell? a. links to a GPO to a site, domain or OU b. displays a list of all group-policy related cmdlets c. gets information about one GPO or all GPOs in the domain d. creates a GPO

d

The PowerShell cmdlet Get-GPO can be used to perform which of the following functions? a. Imports settings from a backed-up GPO to an existing GPO b. Links a GPO to a site, domain or OU c. Displays a list of all group policy-related cmdlets d. Gets information about one GPO or all GPOs in the domain e. None of these are correct

d

Which of the following type of Group Policy can only be linked only at the domain level? a. Public Key Infrastructure b. Advanced Audit Policy Configuration c. Restricted Group Policy d. Password Policy

d

You have just finished configuring a GPO that modifies several settings on computers in the Operations OU and linked the GPO to the OU. You right-click the Operations OU and click Group Policy Update. You check on a few computers in the Operations department and find that the policies haven't been applied. On one computer, you run gpupdate and find that the policies are applied correctly. What's a likely reason the policies weren't applied to all computers when you tried to update them remotely? a. The Computer Configuration node of the GPO is disabled. b. The Operations OU has Block Inheritance set. c. A security filter that blocks the computer accounts has been set. d. You need to configure the firewall on the computers.

d

You want to create an HTML report that shows which policies and GPOs are applied to a particular user and computer. Which command should you use? a. rsop b. Invoke-GPReport c. gpupdate d. gpresult

d