Module 11

11-17) Which of the following port numbers is used to obtain updates from a WSUS server using HTTPS?

8531

11-6) Which section of a GPO contains the most security-related settings for the Windows operating system?

Computer Configuration, Windows Settings

11-9) Which term refers to the process whereby a user or computer obtains a certificate from a CA?

Enrollment

11-8) Which of the following is not included in a certificate?

Private Key

11-11) Which certificate template permissions must you grant to a user or computer before they are auto-enrolled for a certificate using Group Policy? (Choose all that apply.)

Read Enroll Autoenroll

11-3) You have created a new Group Policy Object (GPO). To which of the following objects can this GPO be linked?

Site Domain OU

11-10) Group Policy can be configured to auto-enroll certificates for users and computers based on the permissions in a certificate template on an enterprise CA. True or False?

True

11-15) Which of the following statements regarding the functionality of WSUS are true? (Choose all that apply.)

Updates can be manually or automatically approved for distribution on a WSUS server. Group Policy is used to direct domain computers to a WSUS server for updates. Wa. WSUS prevents Microsoft Update traffic from saturating the bandwidth on an organization's Internet connection A WSUS server can be configured to remove updates from computers that have installed them.

11-20) What can you configure in the Windows Defender Firewall with Advanced Security tool to automatically protect network traffic between computers using IPSec?

Connection Security Rules

11-5) You wish to configure a GPO that allows users in your organization to install a package using the Programs and Features section of Control Panel. Which software deployment method should you choose when configuring the Software Settings section of a GPO?

Publish the software in the User Configuration

11-19) Which of the following Windows Defender features can be used to limit the files, folders and processes that ransomware can modify?

Controlled folder access

11-14) You must enroll each WAP for a certificate based on the RAS and IAS Server certificate template before they can be configured for 802.1X Wireless. True or False?

False

11-2) There are no GPOs created in an Active Directory domain by default. True or False?

False

11-4) Group Policy preferences can be used to configure Windows features, but are only interpreted by Windows 7, Windows Server 2008, and later computers by default. True or False?

True

11-7) You can import administrative template files into a GPO to allow Group Policy to configure third-party software settings. True or False?

True

11-18) Firewall profiles contain a series of firewall rules that apply to a computer when it is connected to a particular type of network (public, private, domain). True or False?

True

11-1) Group Policy settings apply to which of the following objects?

Users Computers

11-13) In an 802.1X Wireless configuration, which component generates the encryption keys used for WPA?

RADIUS server

11-12) Only schema version 1 certificate templates can be configured for auto-enrollment. True or False?

False

11-16) To reduce the amount of storage that is consumed by updates on a WSUS server, you should configure the WSUS server to only synchronize updates for products that are deployed in your organization. True or False?

True