Deck 4: Designing and Implementing Group Policy

Question 1

The ____ can be used to identify individual users, or non-OU containers such as the Users or Computers container.

A) CN
B) OU
C) DC
D) DN

Answer 1

A

Question 2

____ refers to how Group Policy is applied and what settings take precedence if there are problems with two conflicting settings.

A) GPO order of hiding
B) GPO order of encapsulation
C) GPO order of inheritance
D) GPO order of precedence

Answer 2

D

Question 3

Universal group membership information is only contained in the ____.

A) global catalog
B) DNS server
C) GlobalNames Zone
D) RID master

Answer 3

A

Question 4

Group Policy is normally applied every ____ minutes.

A) 10 to 30
C) 90 to 120
B) 30 to 45
D) 60 to 240

Question 5

When global groups are added to other global groups it is commonly called ____.

A) cascading
B) nesting
C) aggregating
D) concatenating

Question 6

The ____ setting is useful to control the membership of any group in Active Directory.

A) Restrict Group Policy
C) Lock Group Membership
B) Block Inheritance
D) Restrict Group Membership

Question 7

In group policy settings, ____ are used to manage many of the interfaces, such as Control Panel, Network, Printers, System, and other Windows components.

A) administrative policies
C) administrative zones
B) administrative templates
D) administrative preferences

Question 8

The only technical reasons to design OUs are ____.

A) administrative control and software distribution
B) administrative control and well-organized structure
C) to delegate control or manage security policy
D) to delegate control or manage objects using Group Policy

Question 9

You must be a member of the Domain Admins group to create a PSO.

Question 10

The GPO order of precedence is ____.

A) domain, parent OUs, children OUs, site
B) site, parent OUs, children OUs, domain
C) site, domain, parent OUs, children OUs
D) site, domain, children OUs, parent OUs

Question 11

On proxy servers, ____ is used to conserve bandwidth usage.

A) caching
C) nesting
B) parsing
D) forward lookup

Question 12

The ____ on the proxy server translates private addresses to public addresses and public addresses back to private.

A) PAT protocol
C) HTTP protocol
B) NAP protocol
D) NAT protocol

Question 13

OUs are difficult to modify.

Question 14

Internet Protocol Security (IPSec) provides confidentiality by encrypting the data using ____.

A) Internet Key Exchange
C) Encrypted Security Header
B) Encapsulated Security Payload
D) Authentication Header

Question 15

____ GPOs are templates of GPOs that can accelerate the use of GPOs in an organization.

A) Template
C) Reference
B) Starter
D) Instantiated

Question 16

A(n) ____ strategy can deploy applications, lock down computers, and reduce the total cost of ownership for computers in an organization.

A) Domain Policy
B) Security Policy
C) Group Policy
D) Administration Policy

Question 17

In group policy settings, ____ allow you to set and configure different settings on users' computers.

A) preferences
C) standards
B) options
D) configurations

Question 18

GPOs can be linked to either the Users container or the Computers container.

Question 19

You can apply Group Policy objects (GPOs) to sites, domains, and Organizational Units (OUs).

Question 20

Because users see OUs, the OUs must follow a structure understood by the users.

Question 21

Discuss two ways that the GPO can be filtered.

Question 22

You can only block inheritance at the ____ level.

A) OU
C) site
B) container
D) forest

Question 23

List and describe the three default policies of IPSec.

Question 24

Discuss what printer location policies can be used for.

Question 25

The real strength of universal groups is realized with ____________________ domains.

Question 26

Normally, only the ____ group is in the Security Filtering area.

A) Security Policy Administrators
C) Domain Administrators
B) Domain Users
D) Authenticated Users

Question 27

Sometimes, you might not want inherited Group Policies to apply to an OU; this can be achieved by setting the ____.

A) Block Settings
C) Block Inheritance
B) Restrict Inheritance
D) Disable Inheritance

Question 28

____ allows the inspection of systems to look for specific conditions on a computer, and is widely used with scripting.

A) IPMI
C) SNMP
B) WMI
D) HTTP

Question 29

The acceptable values for the PSO "mustHave" attribute msDS-PasswordSettingsPrecedence are ____.

A) 0 through 65,535 (values of 3 and 5 commonly used)
B) 0 through 1024 (24 commonly used)
C) Anything greater than 0 (only used if more than one PSO applies)
D) 0 through 255 values of 8 to 15 often used

Question 30

The _________________________ design is a simple OU design based on the structure of the organization.

Question 31

What is the most common use of WMI filters?

Question 32

Discuss how OUs should be named.

Question 33

What are the two commands that can be used to redirect computer accounts and user accounts?

Question 34

The acceptable values for the PSO "mustHave" attribute msDS-msDS-LockoutThreshold are ____.

A) 0 through 65,535 (values of 3 and 5 commonly used)
B) 0 through 1024 (24 commonly used)
C) Anything greater than 0 (only used if more than one PSO applies)
D) 0 through 255 values of 8 to 15 often used

Question 35

Discuss reasons to use OUs.

Question 36

Among the most risky devices in an organization are ____________________ flash drives.

Question 37

Describe the geography structure for OUs.

Question 38

Actual GPOs are commonly named based on their ____________________.

Question 39

The ____________________ Policy includes the account lockout duration, threshold, and the time to reset the account lockout counter.

Question 40

Describe the Kerberos policy within Group Policy.

Question 41

Explain how to create fine-grained policies.