Question 1

The __________ command can be used to perform many of the same functions as the Security Configuration and Analysis snap-in,and can be used in conjunction with batch files and scripts to automate work with security templates.​

Accepted Answer

secedit.exe​

Question 2

What folder is selected by default for scanning when using the Automatically Generate Rules option ​in creating AppLocker policies?

Accepted Answer

A)   ​C:/Users/​user​/ProgramData
B)   ​C:/System32
C)   ​C:/Program Files
D)   ​C:/Users/​user​/Program Files C

Question 3

What happens when two conflicting GPOs have the Enforced option set?

Accepted Answer

The GPO linked to the container highest in the Active Directory hierarchy takes precedence.

Question 4

How are Group Policy Objects linked to Active Directory?

Accepted Answer

The answer of How are Group Policy Objects linked to...

Question 5

By default,how many previous logons are cached locally to a computer?​

Accepted Answer

A)   ​3
B)   ​5
C)   ​7
D)   ​10

Question 6

​When creating a new rule type in the New Inbound (or Outbound)rule Wizard,what rule type can be used for built-in Windows services?

Accepted Answer

A)   ​Program
B)   ​Port
C)   ​Predefined
D)   Service-based

Question 7

Which of the following is not one of the four different ways an application can be designated as an exception to a ​Software Restriction Policy?

Accepted Answer

A)   Hash​
B)   ​Certificate
C)   ​Developer
D)   ​Network zone

Question 8

If a domain consists of DCs that are running verions of Windows Server earlier than Windows Server 2008,what replication method is used?

Accepted Answer

A)   ​Downlevel Server Replication (DSR) 
B)   ​Distributed File System Replication (DFSR) 
C)   ​File Replication Service (FRS) 
D)   ​NT Replication Service (NTRS)

Question 9

Settings in the Administrative Templates section of the User Configuration node affect what area of the registry?​

Accepted Answer

A)   ​HKEY_LOCAL_MACHINE
B)   ​HKEY_CURRENT_USER
C)   ​HKEY_MACHINE_USERS
D)   ​HKEY_LOCAL_USER

Question 10

The folders containing Group Policy Templates (GPTs)can be found under what folder on a domain controller?

Accepted Answer

A)   ​%systemroot%/SYSVOL/domain/Policies
B)   ​​%systemroot%/SYSVOL/sysvol/​domain​/Policies
C)   ​​%systemroot%/SYSVOL/Policies
D)   ​​%systemroot%/​domain​/Policies

Question 11

When applying GPOs in order,what policies take precedence?

Accepted Answer

The answer of When applying GPOs in order,what policies take...

Question 12

​What Active Directory replication method makes use of remote differential compression (RDC)?

Accepted Answer

A)   ​File Replication Service (FRS) 
B)   ​Distributed File System Replication (DFSR) 
C)   ​Active Directory Replication Services (ADRS) 
D)   ​Advanced System Replication (ASR)

Question 13

What is the difference between a managed policy setting and an unmanaged policy setting?

Accepted Answer

The answer of What is the difference between a managed...

Question 14

Remote computers attempting to connect to the local computer are examples of what type of connection?

Accepted Answer

A)   ​Inbound connections
B)   ​Outbound connections
C)   ​Concurrent connections
D)   ​Firewalled connections

Question 15

In what order are Group Policy Objects applied?​

Accepted Answer

A)   ​Local policies,site-linked GPOs,domain-linked GPOs,OU-linked GPOs
B)   ​Site-linked GPOs,domain-linked GPOs,OU-linked GPOs,local policies
C)   ​Domain-linked GPOs,OU-linked GPOs,local policies,site-linked GPOs
D)   ​Site-linked GPOs,local policies,domain-linked GPOs,OU-linked GPOs

Question 16

Local GPOs can affect all computers within a local domain.

Accepted Answer

A) True 
 B)False

Question 17

The Microsoft best practice recommendation is to modify the two default GPOs in a domain for making password policy changes.

Accepted Answer

A) True 
 B)False

Question 18

In the New Connection Security Rule Wizard,what option can be used to set up a rule that requires authentication between two computers,between IP subnets,or between a specific computer and a group of computers in a subnet?​

Accepted Answer

A)   ​Isolation
B)   ​Authentication exemption
C)   Server-to-server​
D)   ​Tunnel

Question 19

If a GPO's link status is "disabled",what affect does this have on the GPO?

Accepted Answer

The answer of If a GPO's link status is "disabled",what...

Question 20

​What tool within Windows Server 2012/R2 must be used in order to change the default auditing settings?

Accepted Answer

A)   ​auditpol.exe
B)   ​secaudit.exe
C)   secpol.exe
D)   ​auditpolicies.exe

Exam 8: Configuring Group Policies

The __________ command can be used to perform many of the same functions as the Security Configuration and Analysis snap-in,and can be used in conjunction with batch files and scripts to automate work with security templates.

What folder is selected by default for scanning when using the Automatically Generate Rules option in creating AppLocker policies?

What happens when two conflicting GPOs have the Enforced option set?

How are Group Policy Objects linked to Active Directory?

By default,how many previous logons are cached locally to a computer?

When creating a new rule type in the New Inbound (or Outbound) rule Wizard,what rule type can be used for built-in Windows services?

Which of the following is not one of the four different ways an application can be designated as an exception to a Software Restriction Policy?

If a domain consists of DCs that are running verions of Windows Server earlier than Windows Server 2008,what replication method is used?

Settings in the Administrative Templates section of the User Configuration node affect what area of the registry?

The folders containing Group Policy Templates (GPTs) can be found under what folder on a domain controller?

When applying GPOs in order,what policies take precedence?

What Active Directory replication method makes use of remote differential compression (RDC) ?

What is the difference between a managed policy setting and an unmanaged policy setting?

Remote computers attempting to connect to the local computer are examples of what type of connection?

In what order are Group Policy Objects applied?

Local GPOs can affect all computers within a local domain.

The Microsoft best practice recommendation is to modify the two default GPOs in a domain for making password policy changes.

In the New Connection Security Rule Wizard,what option can be used to set up a rule that requires authentication between two computers,between IP subnets,or between a specific computer and a group of computers in a subnet?

If a GPO's link status is "disabled",what affect does this have on the GPO?

What tool within Windows Server 2012/R2 must be used in order to change the default auditing settings?

Exam 8: Configuring Group Policies

The __________ command can be used to perform many of the same functions as the Security Configuration and Analysis snap-in,and can be used in conjunction with batch files and scripts to automate work with security templates.​

What folder is selected by default for scanning when using the Automatically Generate Rules option ​in creating AppLocker policies?

What happens when two conflicting GPOs have the Enforced option set?

How are Group Policy Objects linked to Active Directory?

By default,how many previous logons are cached locally to a computer?​

​When creating a new rule type in the New Inbound (or Outbound) rule Wizard,what rule type can be used for built-in Windows services?

Which of the following is not one of the four different ways an application can be designated as an exception to a ​Software Restriction Policy?

If a domain consists of DCs that are running verions of Windows Server earlier than Windows Server 2008,what replication method is used?

Settings in the Administrative Templates section of the User Configuration node affect what area of the registry?​

The folders containing Group Policy Templates (GPTs) can be found under what folder on a domain controller?

When applying GPOs in order,what policies take precedence?

​What Active Directory replication method makes use of remote differential compression (RDC) ?

What is the difference between a managed policy setting and an unmanaged policy setting?

Remote computers attempting to connect to the local computer are examples of what type of connection?

In what order are Group Policy Objects applied?​

Local GPOs can affect all computers within a local domain.

The Microsoft best practice recommendation is to modify the two default GPOs in a domain for making password policy changes.

In the New Connection Security Rule Wizard,what option can be used to set up a rule that requires authentication between two computers,between IP subnets,or between a specific computer and a group of computers in a subnet?​

If a GPO's link status is "disabled",what affect does this have on the GPO?

​What tool within Windows Server 2012/R2 must be used in order to change the default auditing settings?

The __________ command can be used to perform many of the same functions as the Security Configuration and Analysis snap-in,and can be used in conjunction with batch files and scripts to automate work with security templates.

What folder is selected by default for scanning when using the Automatically Generate Rules option in creating AppLocker policies?

By default,how many previous logons are cached locally to a computer?

When creating a new rule type in the New Inbound (or Outbound) rule Wizard,what rule type can be used for built-in Windows services?

Which of the following is not one of the four different ways an application can be designated as an exception to a Software Restriction Policy?

Settings in the Administrative Templates section of the User Configuration node affect what area of the registry?

What Active Directory replication method makes use of remote differential compression (RDC) ?

In what order are Group Policy Objects applied?

In the New Connection Security Rule Wizard,what option can be used to set up a rule that requires authentication between two computers,between IP subnets,or between a specific computer and a group of computers in a subnet?

What tool within Windows Server 2012/R2 must be used in order to change the default auditing settings?