Question 1

What is a starter GPO, and how is it created?

Accepted Answer

A starter GPO is a template GPO that contains Administrative Templates settings that are automatically applied to the new GPO. To create a starter GPO, one can right-click the Starter GPOs folder under Group Policy Management, click New, and specify a GPO name. Following this, one must edit the GPO to include the desired settings to be included in the GPO template. If a starter GPO is edited, Administrative Templates is the only folder available under the Computer Configuration and User Configuration sections. The settings in all other GPO folders cannot be configured in a starter GPO. REJ: Please explore the section " Configuring Group Policy " for more information.

Question 2

What is Group Policy, and why is it used?

Accepted Answer

Group Policy is a powerful administrative feature in Active Directory. Group Policy can be used to automatically configure software; Windows features; and security, program, and user interface settings on computers in an Active Directory domain based on the location of a user or computer account in the Active Directory database. To configure Group Policy, one must create Group Policy Objects (GPOs) that have the appropriate settings. A single GPO can be applied to thousands of users and computers in an organization to reduce the time and effort that it takes to administer a large domain. REJ: Please explore the section "Configuring Group Policy" for more information.

Question 3

If multiple GPOs are linked to the same site, domain, or OU, they will be applied in a random order.

Accepted Answer

A) True 
 B)False  False

Question 4

Amina, who works for a pharmaceutical company, configures and issues the Smartcard Logon certificate template with schema version 2. While most of the users get auto-enrolled, some of the users fail to obtain the certificate. Identify the most likely reason auto-enrollment failed for these users.

Accepted Answer

A)  Their operating system is Windows XP. 
B)  They have the Block Inheritance setting at the OU level. 
C)  The template did not have the Enforced setting. 
D)  Their operating system is Windows 2000. 
A)  Their operating system is Windows XP. 
B)  They have the Block Inheritance setting at the OU level. 
C)  The template did not have the Enforced setting. 
D)  Their operating system is Windows 2000.

Question 5

What are the situations in which a GPO does not apply to a user or computer account?

Accepted Answer

A GPO does not apply to a user or comput

Question 6

Which of the following is true of Group Policy Objects (GPOs)?

Accepted Answer

A)  They do not apply to Active Directory groups. 
B)  They are not strictly enforced. 
C)  They allow users to configure settings that are applied by GPOs. 
D)  They are limited to 500 or less users or computers. 
A)  They do not apply to Active Directory groups. 
B)  They are not strictly enforced. 
C)  They allow users to configure settings that are applied by GPOs. 
D)  They are limited to 500 or less users or computers.

Question 7

Aster has created new firewall rules in Windows Defender. One of the new rules appears to cause an error. Aster thinks that the rule itself is the issue. Describe the steps she should follow to eliminate the rule as the cause of issue.

Accepted Answer

Aster must disable the firewall rule tha

Question 8

Chynna wants to create two different firewall rules that are applicable depending on whether a computer is connected to a corporate domain or a home network. Which of the following panes in the New Inbound Rule Wizard should Chynna select to specify the conditions that should be met before the rules can be applied?

Accepted Answer

A)  The Profile pane 
B)  The Action pane 
C)  The Rule Type pane 
D)  The Protocol and Ports pane 
A)  The Profile pane 
B)  The Action pane 
C)  The Rule Type pane 
D)  The Protocol and Ports pane

Question 9

XM GraFix, a graphics design company, has bought new design software. Mason, the system administrator, wants to install the software on all the computers in the design department. However, not all the designers need the software. Using the GPO, Mason uses a deployment method that allows the users to install the program from the network when they need it. Which of the following methods of deployment has Mason most likely used in the given scenario?

Accepted Answer

A)  Published the software under Software Settings in the Computer Configuration 
B)  Published the software under Software Settings in the User Configuration 
C)  Assigned the software under Software Settings in the Computer Configuration 
D)  Assigned the software under Software Settings in the User Configuratio 
A)  Published the software under Software Settings in the Computer Configuration 
B)  Published the software under Software Settings in the User Configuration 
C)  Assigned the software under Software Settings in the Computer Configuration 
D)  Assigned the software under Software Settings in the User Configuratio

Question 10

Which of the following settings in Windows defender should be enabled to prevent malware and network attacks from accessing high-security processes in systems that support core isolation?

Accepted Answer

A)  The Block Inheritance setting 
B)  The firewall rules setting 
C)  The controlled folder access setting 
D)  The memory integrity setting 
A)  The Block Inheritance setting 
B)  The firewall rules setting 
C)  The controlled folder access setting 
D)  The memory integrity setting

Question 11

Having heard the data theft suffered by a competing company by a man-in-the-middle attack, Finn asks Talia, his server administrator, to implement measures to prevent such attacks in his company. Which of the following should Talia do to ensure that Finn's company is protected from such attacks?

Accepted Answer

A)  Hire the services of a third-party Certification Authority 
B)  Configure the Block Inheritance setting at OU-level GPOs 
C)  Run the gpupdate /force command in a Command Prompt window. 
D)  Run the gpresult /r command in Windows PowerShell. 
A)  Hire the services of a third-party Certification Authority 
B)  Configure the Block Inheritance setting at OU-level GPOs 
C)  Run the gpupdate /force command in a Command Prompt window. 
D)  Run the gpresult /r command in Windows PowerShell.

Question 12

List the sequence of events that takes place to ensure that data is encrypted during the transfer w hen someone accesses a website.

Accepted Answer

When someone accesses a website, the seq

Question 13

Giselle, a systems administrator, creates a file redirection GPO, in the User Configuration section that automatically saves files created by her colleagues to a shared network device instead of the local drives in their computers. However, the computers do not receive the configuration specified in the GPO. She runs the gpupdate /force command in the Command Prompt window of one of her colleagues' computer. Despite her effort, the computer does not receive the GPO, and she decides to rectify the issue the next day. To her surprise, she sees that the computer has been configured as per the GPO. What do you see as the issue with the GPO configuration?

Accepted Answer

A)  The GPO was not backed up before the new settings were applied. 
B)  The settings can only be applied at the next login. 
C)  The computer had to be rebooted for the application of the GPO settings. 
D)  The Block Inheritance setting was enabled for the OU that the computers belonged to. 
A)  The GPO was not backed up before the new settings were applied. 
B)  The settings can only be applied at the next login. 
C)  The computer had to be rebooted for the application of the GPO settings. 
D)  The Block Inheritance setting was enabled for the OU that the computers belonged to.

Question 14

To prevent man-in-the-middle attacks, Janet, a network administrator, configures a GPO such that all the traffic sent toward a specific database server is encrypted using IPSec. While most of her colleagues are able to successfully connect to the database via the IPSec authentication process, the connection is not successful for some computers. What do you see to be the problem here?

Accepted Answer

A)  The IP addresses of the computers were not added under Endpoint 1. 
B)  The connection between the failed computers and the server was protected with IPSec. 
C)  The rule type was set to Isolation instead of Server-to-server. 
D)  The computers did not have an IPSec certificate. 
A)  The IP addresses of the computers were not added under Endpoint 1. 
B)  The connection between the failed computers and the server was protected with IPSec. 
C)  The rule type was set to Isolation instead of Server-to-server. 
D)  The computers did not have an IPSec certificate.

Question 15

A 257-bit encryption key is twice as difficult to guess compared to a 256-bit encryption key.

Accepted Answer

A) True 
 B)False

Question 16

WPA3 is immune to wireless cracking tools because it uses a Wi-Fi password in a different way than WPA2 does.

Accepted Answer

A) True 
 B)False

Question 17

Amber is a hacker who steals information when people enter their personal details on specific websites. She intercepts the public key as it is sent from the Web server to the Web browser and substitutes her own public key in its place. This enables her to intercept the communication and decrypt the symmetric encryption key using her private key. Which type of hacking attack is Amber perpetrating?

Accepted Answer

A)  A denial-of-service attack 
B)  A man-in-the-middle attack 
C)  A drive-by attack 
D)  A malware attack 
A)  A denial-of-service attack 
B)  A man-in-the-middle attack 
C)  A drive-by attack 
D)  A malware attack

Question 18

When a CA public/private key pair expires, a system administrator must generate a new CA public/private key pair the same day to ensure a smooth transition.

Accepted Answer

A) True 
 B)False

Question 19

The new system administrator of XYZ company realizes that whenever updates are available for Windows, WSUS redirects computers to the Microsoft Update servers on the Internet to obtain updates instead of storing the update information on the WID. Which of the following is a likely reason for this issue?

Accepted Answer

A)  The WSUS installation is either incomplete or has not been installed properly. 
B)  While installing WSUS, the option SQL Server Connectivity was selected. 
C)  While installing WSUS, the option Store updates in the following location was deselected. 
D)  While configuring WSUS, the option Synchronize from another Windows Server Update Services server was selected. 
A)  The WSUS installation is either incomplete or has not been installed properly. 
B)  While installing WSUS, the option SQL Server Connectivity was selected. 
C)  While installing WSUS, the option Store updates in the following location was deselected. 
D)  While configuring WSUS, the option Synchronize from another Windows Server Update Services server was selected.

Question 20

Denali wants to store information about all Windows updates on a specific Microsoft SQL Server for security reasons. Which of the following wizards can Denali use to set up SQL Server Connectivity to store update information?

Accepted Answer

A)  The Group Policy Results Wizard 
B)  The Add Roles and Features Wizard 
C)  The Windows Server Updates Services Configuration Wizard 
D)  The Certificate Enrollment wizard 
A)  The Group Policy Results Wizard 
B)  The Add Roles and Features Wizard 
C)  The Windows Server Updates Services Configuration Wizard 
D)  The Certificate Enrollment wizard

What is a starter GPO, and how is it created?

What is Group Policy, and why is it used?

If multiple GPOs are linked to the same site, domain, or OU, they will be applied in a random order.

Amina, who works for a pharmaceutical company, configures and issues the Smartcard Logon certificate template with schema version 2. While most of the users get auto-enrolled, some of the users fail to obtain the certificate. Identify the most likely reason auto-enrollment failed for these users.

What are the situations in which a GPO does not apply to a user or computer account?

Which of the following is true of Group Policy Objects (GPOs)?

Aster has created new firewall rules in Windows Defender. One of the new rules appears to cause an error. Aster thinks that the rule itself is the issue. Describe the steps she should follow to eliminate the rule as the cause of issue.

Which of the following settings in Windows defender should be enabled to prevent malware and network attacks from accessing high-security processes in systems that support core isolation?

Having heard the data theft suffered by a competing company by a man-in-the-middle attack, Finn asks Talia, his server administrator, to implement measures to prevent such attacks in his company. Which of the following should Talia do to ensure that Finn's company is protected from such attacks?

List the sequence of events that takes place to ensure that data is encrypted during the transfer w hen someone accesses a website.

A 257-bit encryption key is twice as difficult to guess compared to a 256-bit encryption key.

WPA3 is immune to wireless cracking tools because it uses a Wi-Fi password in a different way than WPA2 does.

When a CA public/private key pair expires, a system administrator must generate a new CA public/private key pair the same day to ensure a smooth transition.

Denali wants to store information about all Windows updates on a specific Microsoft SQL Server for security reasons. Which of the following wizards can Denali use to set up SQL Server Connectivity to store update information?

Getting Started With Windows Server 2019

Configuring Windows Server 2019

Implementing Hyper-V and Automated Server Deployment

Introduction to Active Directory and Account Management

Configuring Resource Access

Configuring Printing Services

Configuring and Managing Data Storage

Implementing Network Services

Configuring Remote Access Services

Configuring Cloud Features

Monitoring and Troubleshooting Windows Server 2019

Filters

Exam 11: Securing Windows Server 2019

What is a starter GPO, and how is it created?

What is Group Policy, and why is it used?

If multiple GPOs are linked to the same site, domain, or OU, they will be applied in a random order.

Amina, who works for a pharmaceutical company, configures and issues the Smartcard Logon certificate template with schema version 2. While most of the users get auto-enrolled, some of the users fail to obtain the certificate. Identify the most likely reason auto-enrollment failed for these users.

What are the situations in which a GPO does not apply to a user or computer account?

Which of the following is true of Group Policy Objects (GPOs)?

Aster has created new firewall rules in Windows Defender. One of the new rules appears to cause an error. Aster thinks that the rule itself is the issue. Describe the steps she should follow to eliminate the rule as the cause of issue.

Which of the following settings in Windows defender should be enabled to prevent malware and network attacks from accessing high-security processes in systems that support core isolation?

Having heard the data theft suffered by a competing company by a man-in-the-middle attack, Finn asks Talia, his server administrator, to implement measures to prevent such attacks in his company. Which of the following should Talia do to ensure that Finn's company is protected from such attacks?

List the sequence of events that takes place to ensure that data is encrypted during the transfer w hen someone accesses a website.

A 257-bit encryption key is twice as difficult to guess compared to a 256-bit encryption key.

WPA3 is immune to wireless cracking tools because it uses a Wi-Fi password in a different way than WPA2 does.

When a CA public/private key pair expires, a system administrator must generate a new CA public/private key pair the same day to ensure a smooth transition.

Denali wants to store information about all Windows updates on a specific Microsoft SQL Server for security reasons. Which of the following wizards can Denali use to set up SQL Server Connectivity to store update information?

Getting Started With Windows Server 2019

Configuring Windows Server 2019

Implementing Hyper-V and Automated Server Deployment

Introduction to Active Directory and Account Management

Configuring Resource Access

Configuring Printing Services

Configuring and Managing Data Storage

Implementing Network Services

Configuring Remote Access Services

Configuring Cloud Features

Monitoring and Troubleshooting Windows Server 2019

Filters