Module 04: Configuring Group Policies

Charles removes the Authenticated Users group from a GPO. Why would he do that?

• To enable Windows Management Instrumentation filtering on specific users

• To prevent the GPO from being applied to specific users and/or computers

• To ensure the default settings applied due to security filtering are inherited

• To temporarily prevent user access to domain resources during DC backup

Identify the elements that GPTs and GPCs have in common. Select two.

• One serves as a backup for the other

• They are replicated using the same method

• They are both stored in Active Directory

• They are both assigned a globally unique ID

• They both have a Machine and User subfolder

Which of the following represent recommended or best practices relative to group policies? Select two.

• Set account policies and a few critical security policies at the domain level

• Define group policy settings at the domain level and define exceptions at the OU level

• If managing Computers and Users objects with group policies, move them to an OU

• Define group policy settings at the site level and define exceptions at the domain level

• AD folders, such as Computers and Users, should have a GPO linked to them

You are using an Administrative Template to configure an aspect of the Event Viewer. In which folder will you make the changes?

• System

• Windows Components

• Server

• Operating System Components

• Events

When Bernadette, a professor, signs on to her office computer she sees the IP address in the lower right hand side of the desktop. However, when she signs on to a computer in the computer lab using the same credentials, she sees a different background and the IP address is not displayed. What is the most likely reason why the policy applied in her office is different from the one in the computer lab?

• Loopback policy processing is enabled in the lab computer

• Loopback policy processing is enabled in her office computer

• Her office computer and lab computers are in different domains

• Her office computer and lab computers have different policies

You want to shield a few objects in an OU from the GPO linked to it. How can you accomplish this? Select three.

• Use Security Filtering in the GPMC to add objects to shield

• Modify the group policy in the AD System\Policies folder

• Remove the Authenticated Users group from the GPO

• Use Windows Management Instrumentation filtering

• Directly edit the GPO's discretionary access control list

Lorenzo wants to configure a group policy preference on a limited set of systems that are running a specific version of the Windows operating system. How can he best implement the policy only on those systems?

• Create an ADM file

• Use a preference exception

• Use a logon script

• Use item-level targeting

You need to apply group policy settings on some laptops that must be enforced only when they are connected to the company's network. What type of policy setting should you create?

• Managed policy setting

• Dynamic policy setting

• Persistent policy setting

• Unmanaged policy setting

Which of the following statements are true in describing the differences between a published application and an assigned application software installation method for users? Select two.

• A published application is not installed automatically on startup

• An assigned application is reserved for specific account types

• A published application is on a share drive available to all users

• An assigned application cannot be installed automatically

• A published application can be installed from the Control Panel

Victor is creating a startup called myscript.ps1 that will be deployed using a GPO. Where should he place the script, such that it would offer the greatest advantage?

• In the User Configuration node

• On a regular shared folder

• In the SYSVOL/sysvol/ folder

• In the GUID folder of the GPO