nos230 - midterm exam 4/15/2020

500 Kbps

A slow link, by default, is a network connection that's less than which of the following?

C:\Users\LogonName

A user's profile is stored in what directory on a local computer by default?

True

Active Directory's use of multimaster replication ensures that changes to AD objects are automatically replicated to all domain controllers.

The template policy and current computer policy are the same

After running the Security Configuration and Analysis snap-in with a template, what does a check mark in a green circle mean?

Security descriptor

An Active Directory object's security settings are composed of three components, what term is used to refer to these three components?

Ten.

An authenticated user can add up to how many computer accounts to the domain, by default?

7 days

By default, what is the maximum period during which a TGT can be renewed?

Type the > character followed by the file name

How can the output of a command be redirected to a file instead of being displayed on the computer's screen?

Every 90 minutes

How often are computer and user policies applied after a user has logged into a computer?

SYSVOL folder

If a central store for policy definition files has been created, where should the PolicyDefinitions folder reside?

The resource must have proper permissions set for ComputerName$, where ComputerName is the name of the computer attempting to access the resource.

If using virtual accounts to access the network, how are permissions added to a network resource to allow the virtual account access?

False

Security Principals define which resources users can access and what level of access they have.

Local operator

Select below the option that is not one of the three built-in service accounts.

Edit Settings

Select the GPO permission that provides the ability to change existing settings, import settings, and enable or disable a GPO, but is not granted to any user by default.

Import-GPO

Select the command that is used to import settings from a backed-up GPO to an existing GPO.

SYSVOL folder

Select the specific Windows folder that is a shared folder containing file-based information that is replicated to other domain controllers.

Timestamp

Select the term that is a record of the time a message is sent and is used in Kerberos to determine a message's validity and prevent replay attacks.

GPO enforcement

Select the term used to describe forcing inheritance of settings on all child objects in the GPO's scope, even if a GPO with conflicting settings is linked to a container at a deeper level.

delegation of control

Select the term used to describe the process, within the context of Active Directory, that allows a person with higher security privileges to assign authority to a person of lesser security privileges to perform certain tasks.

False

The Backup Operators group is a group in local computers only.

42 days

The Default Domain Policy sets the maximum password age to what value?

False.

The dcpromo.exe command is the preferred method for installing Active Directory on Server Core.

%systemroot%\SYSVOL\sysvol\domain\Policies

The folders containing Group Policy Templates (GPTs) can be found under what folder on a domain controller?

Control Panel

Under the Computer Configuration, which folder contains settings related to the Regional and Language Options, User Accounts, and Personalization options?

PowerShell

What configuration tool must be used to create and manage MSAs?

Administrative Templates

What folder under Policies within the Computer Configuration Node of a GPO contains the Control Panel, Network, Printers, System, and Windows Component folders?

Windows Components

What folder within the Computer Configuration node contains settings related to Event Viewer, File Explorer, Windows PowerShell, and Windows Update?

Logging into older Windows OSs or using older Windows applications

What is a downlevel user logon name used for?

Loggin

What mode of the Resultant Set of Policy (RSoP) snap-in produces a database of policy results that you browse in a similar manner to using the Group Policy Management Editor?

Restricted Groups

What policy allows an administrator to control the membership of both domain groups and local groups on member computers?

Kerberos

What specific authentication protocol used in a Windows domain environment to authenticate logons and grant accounts access to domain resources?

auditpol.exe

What tool within Windows Server 2016 must be used in order to change the default auditing settings?

group managed service account

What type of account provides the same functions as managed service accounts but can be managed across multiple servers as in a server farm or a load-balancing arrangement?

assigned

What type of application can be installed automatically when the user logs on to a computer in the domain?

All users and computers physically located at the site.

When a GPO is linked to a site object, what will be affected?

User must change password at next logon

When creating a new user, the "User cannot change password" option can't be used in conjunction with what other option?

setspn.ex

Which command line utility below can be used to change an SPN?

Service user account

Which of the following choices is NOT one of the three user account types defined in Windows Server 2016?

Schema master

Which of the following choices is one of the two forest-wide FSMO roles?

Groups

Which of the following is NOT a security principal that can be assigned permissions?

user template

Which of the following is a user account that is copied to create users with common attributes?

domain

Which of the following is the primary identifying and administrative unit in Active Directory?

The domain structure must be able to utilize different name identities

Which of the following scenarios is not ideal for the deployment of a single domain structure?

The Guest account should be rename if it will be used

Which of the following statements is true regarding the built-in Guest account?

Security filtering

Which of the following uses permissions to restrict objects from accessing a GPO?

VMI filtering

Which of the following uses queries to select a group of computers based on certain attributes, and then applies or doesn't apply policies based on the query's results?

Policy events

Which tab in the Group Policy Results window shows all events in Event Viewer that are generated by group policies, and can be used to view the relevant information on a remote computer?

Service ticket

Which type of ticket below is requested by an account when it wants to access a network resource, such as a shared folder?

False

Windows creates two built-in user accounts automatically: Administrator and User.

True

You can see a GPO's DACL in Active Directory Users and Computers in the System\Policies folder.