Module 11 Review Quiz

Which of the following statements regarding the functionality of WSUS are true? (Choose all that apply.)

All of the Above WSUS prevents Microsoft Update traffic from saturating the bandwidth on an organization's Internet connection. Group Policy is used to direct domain computers to a WSUS server for updates. Updates can be manually or automatically approved for distribution on a WSUS server. A WSUS server can be configured to remove updates from computers that have installed them.

Which of the following is not included in a certificate?

Private key

You must enroll each WAP for a certificate based on the RAS and IAS Server certificate template before they can be configured for 802.1X Wireless.

False

You wish to configure a GPO that allows users in your organization to install a package using the Programs and Features section of Control Panel. Which software deployment method should you choose when configuring the Software Settings section of a GPO?

Publish the software in the User Configuration

In an 802.1X Wireless configuration, which component generates the encryption keys used for WPA?

RADIUS server

Firewall profiles contain a series of firewall rules that apply to a computer when it is connected to a particular type of network (public, private, domain).

True

Group Policy can be configured to auto-enroll certificates for users and computers based on the permissions in a certificate template on an enterprise CA.

True

Group Policy preferences can be used to configure Windows features, but are only interpreted by Windows 7, Windows Server 2008, and later computers by default.

True

To reduce the amount of storage that is consumed by updates on a WSUS server, you should configure the WSUS server to only synchronize updates for products that are deployed in your organization.

True

You can import administrative template files into a GPO to allow Group Policy to configure third-party software settings

True

Which term refers to the process whereby a user or computer obtains a certificate from a CA?

enrollment

You have created a new Group Policy Object (GPO). To which of the following objects can this GPO be linked? (Choose all that apply.)

-OU -Site -Domain

Which certificate template permissions must you grant to a user or computer before they are auto-enrolled for a certificate using Group Policy? (Choose all that apply.)

-Read -Enroll -Autoenroll

Group Policy settings apply to which of the following objects? (Choose all that apply.)

-Users -Computers

Which of the following port numbers is used to obtain updates from a WSUS server using HTTPS?

8531

Which section of a GPO contains the most security-related settings for the Windows operating system?

Computer Configuration, Windows Settings

What can you configure in the Windows Defender Firewall with Advanced Security tool to automatically protect network traffic between computers using IPSec?

Connection security rules

Which of the following Windows Defender features can be used to limit the files, folders and processes that ransomware can modify?

Controlled folder access

Only schema version 1 certificate templates can be configured for auto-enrollment.

False

There are no GPOs created in an Active Directory domain by default.

False