70-410 - GPO

Question 1

QUESTION 14
Your network contains an Active Directory domain named contoso.com. You have a Group Policy object (GPO) named GP1 that is linked to the domain.GP1 contains a software restriction policy that blocks an application named App1. You have a workgroup computer named Computer1 that runs Windows 8. A local Group Policy on Computer1 contains an application control policy that allows App1.
You join Computer1 to the domain.
You need to prevent App1 from running on Computer1.
What should you do?
A. FromComputer1, run gpupdate /force.
B. From Group Policy Management, add an application control policy to GP1.
C. From Group Policy Management, enable the Enforced option on GP1.
D. In the local Group Policy of Computer1, configure a software restriction policy.

Answer 1

B

Question 2

QUESTION 15
Your network contains an Active Directory domain named contoso.com. All client computer accounts are in an organizational unit (OU) named AllComputers. Client computers run either windows 7 or Windows 8.
You create a Group Policy object (GPO) named GP1.
You link GP1 to the AllComputers OU.
You need to ensure that GP1 applies only to computers that have more than 8 GB of memory. What should you configure?
A. The Security settings of GP1
B. The Block Inheritance option for AllComputers
C. The Security settings of AllComputers
D. The WMI filter for GP1

Answer 2

D

Question 3

QUESTION 29
Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. The servers are contained in an organizational unit (OU) named ServersOU.
You need to create a group named Group1 on all of the servers in the domain.You must ensure that Group1 is added only to the servers.
What should you configure?
A. A Restricted Groups setting in a Group Policy linked to ServersOU
B. A Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers OU
C. A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
D. A Restricted Groups setting in a Group Policy linked to the domain

Answer 3

C

Question 4

QUESTION 57
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.Server1 has the Group Policy Management feature installed. Server2 has the Print and Document Services server role installed.
On Server2, you open Print Management and you deploy a printer named Printer1 by using a Group Policy object (GPO) named GPO1.When you open GPO1 on Server1, you discover that the Deployed Printers node does not appear.
You need to view the Deployed Printers node in GPO1. What should you do?
A. On Server1, modify the Group Policy filtering options of GPO1.
B. On a domain controller, create a Group Policy central store.
C. On Server2, install the Group Policy Management feature.
D. On Server1, configure the security filtering of GPO1.

Answer 4

C

Question 5

QUESTION 97
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
You create a security template named Template1 by using the Security Templates snap-in. You need to apply Template1 to Server2.
Which tool should you use?
A. System Configuration
B. Local Security Policy
C. Certificate Templates
D. computer Management

Answer 5

B

Question 6

QUESTION 98
Your network contains an Active Directory domain named contoso.com. All of the AppLocker policy settings for the member servers are configured in a Group Policy object (GPO) named GPO1.
A member server named Server1 runs Windows Server 2012 R2.
On Server1, you test a new set of AppLocker policy settings by using a local computer policy. You need to merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1.
What should you do?
A. From Local Group Policy Editor on Server1, export an .inf file. Import the .inf file by using Group Policy Management Editor.
B. From Server1, run the Set-ApplockerPolicycmdlet.
C. From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by using Group Policy Management Editor.
D. From Server1, run the New-ApplockerPolicycmdlet.

Answer 6

B

Question 7

QUESTION 114
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.Client computers run either Windows 7 or Windows 8.
All of the computer accounts of the client computers reside in an organizational unit (OU) named Clients. A Group Policy object (GPO) named GPO1 is linked to the Clients OU. All of the client computers use a DNS server named Server1.
You configure a server named Server2 as an ISATAP router. You add a host (A) record for ISATAP to the contoso.com DNS zone.
You need to ensure that the client computers locate the ISATAP router. What should you do?
A. Run the Set-DnsServerGlobalQueryBlockListcmdlet on Server1,
B. Configure the Network Options Group Policy preference of GPO1.
C. Run the Add-DnsServerResourceRecordcmdlet on Server1. D. Configure the DNS Client Group Policy setting of GPO1.

Answer 7

A

Question 8

QUESTION 120
Your network contains a production Active Directory forest named contoso.com and a test Active Directory forest named contoso.test. A trust relationship does not exist between the forests.
In the contoso.test domain, you create a backup of a Group Policy object (GPO) named GPO1. You transfer the backup of GPO1 to a domain controller in the contoso.com domain.
You need to create a GPO in contoso.com based on the settings of GPO1.You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
A. From Windows PowerShell, run the Get- GPO cmdlet and the Copy- GPO cmdlet.
B. From Windows PowerShell, run the New- GPO cmdlet and the Import- GPO cmdlet.
C. From Group Policy Management, create a new starter GPO.Right-click the new starter GPO, and then click Restore from Backup.
D. From Group Policy Management, right-click the Croup Policy Objects container, and then click Manage Backups.

Answer 8

B

Question 9

QUESTION 121
Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains the computer accounts for laptops and desktop computers. A Group Policy object (GPO) named GP1 is linked to OU1.
You need to ensure that the configuration settings in GP1 are applied only to a user named User1.
What should you do?
A. Modify the security settings of OU1.
B. Modify the GPO Status of GP1.
C. Modify the security settings of GP1.
D. Configure the WMI Filter of GP1.

Answer 9

C

Question 10

QUESTION 131
Your network contains a file server named Server1 that runs Windows Server 2012 R2.All client computers run Windows 8.
You need to ensure that when users are connected to the network, they always use local offline files that are cached from Server1.
Which Group Policy setting should you configure?
A. Configure Slow link speed.
B. Turn on economical application of administratively assigned Offline Files.
C. Configure slow-link mode.
D. Enable file synchronization on costed networks.

Answer 10

C

Question 11

QUESTION 139
Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 is a member of a workgroup.
You need to configure a local Group Policy on Server1 that will apply only to non- administrators. Which tool should you use?
A. Group Policy Object Editor
B. Group Policy Management
C. Group Policy Management Editor
D. Server Manager

Answer 11

A

Question 12

QUESTION 140
Your network contains an Active Directory domain named contoso.com. The domain contains 20 computer accounts that reside in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to assign several user rights to a user named User1.
In the Users container, you create a new user named User2.
You need to ensure that User2 is assigned the same user rights as User1 on all of the client computers in OU1.
What should you do?
A. Modify the settings in GPO1.
B. Modify the link of GPO1.
C. Link a WMI filter to GPO1. D. MoveUser2toOU1.

Answer 12

D

Question 13

QUESTION 159
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named CONT1 and CONT2. Both servers run Windows Server 2012 R2.
CONT1 has a shared printer named Printer1. CONT2 connects to Printer1 on CONT1.
When you attempt to remove Printer1 from CONT2, you receive the error message shown in the exhibit. (Click the Exhibit button.)
You successfully delete the other printers installed on CONT2.
You need to identify what prevents you from deleting Printer1 on CONT2. What should you identify?
A. Printer1 is deployed as part of a mandatory profile.
B. Printer1 is deployed by using a Group Policy object (GPO).
C. Your user account is not a member of the Print Operators group on CONT2.
D. Your user account is not a member of the Print Operators group on CONT1.

Answer 13

B

Question 14

QUESTION 163
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.
An administrator creates a security template named Template1. You need to apply Template1 to Server1.
Which snap-in should you use?
A. Resultant Set of Policy
B. Security Configuration and Analysis
C. Authorization Manager D. Security Templates

Answer 14

B

Question 15

QUESTION 164
Your network contains an Active Directory domain named contoso.com.
You have a Group Policy object (GPO) named GPO1 that contains several user settings. GPO1 is linked to an organizational unit (OU) named OU1.
The help desk reports that GPO1 applies to only some of the users in OU1.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)
You need to configure GPO1 to apply to all of the users in OU1. What should you do?
A. Enforce GPO1.
B. Modify the GPO status of GPO1.
C. Modify the Security settings of GPO1. D. Disable Block Inheritance on OUL.

Answer 15

A

Question 16

QUESTION 177
Your network contains an Active Directory domain named contoso.com.
All user accounts in the marketing department reside in an organizational unit (OU) named OU1. You have a Group Policy object (GPO) named GPO1. GPO1 contains Folder Redirection settings. GPO1 has default permissions. You discover that the Folder Redirection settings are not applied to the users in the marketing department. You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the Folder Redirection settings in GPO1 apply to the marketing users. What should you do?
A. Modify the Delegation settings of GPO1.
B. Enable the link of GPO1.
C. Enforce GPO1.
D. Modify the link order of GPO1.

Answer 16

C

Question 17

QUESTION 178
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
You need to ensure that the local administrator account on all computers is renamed to L.Admin. Which Group Policy settings should you modify?
A. Restricted Groups
B. Security Options
C. User Rights Assignment
D. Preferences

Answer 17

B

Question 18

QUESTION 187
Your network contains an Active Directory domain named contoso.com.
The domain contains 20 computer accounts in an organizational unit (OU) named OU1. A user account named User1 is in an OU named OU2.
You are configuring a Group Policy object (GPO) named GPO1.
You need to assign User1 the Backup files and directories user right to all of the computer accounts in OU1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. From User Configuration in GPO1, modify the security settings.
B. Link GPO1 to OU1.
C. From Computer Configuration in GPO1, modify the security settings.
D. Modify the Delegation settings of GPO1.
E. Link GPO1 to OU2.

Answer 18

BC

Question 19

QUESTION 189
Your network contains an Active Directory domain named contoso.com.
You have a starter Group Policy object (GPO) named GPO1 that contains more than 100 settings. You need to create a new starter GPO based on the settings in GPO1.
You must achieve this goal by using the minimum amount of administrative effort. What should you do?
A. Create a new starter GPO and manually configure the policy settings of the starter GPO.
B. Right-click GPO1, and then click Back Up. Create a new starter GPO. Right-click the new GPO, and then click Restore from Backup.
C. Right-click GPO1, and then click Copy. Right-click Starter GPOs, and then click Paste.
D. Run the New-GPStarterGPOcmdlet and the Copy-GPO cmdlet.

Answer 19

C

Question 20

QUESTION 205
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.
An application named Appl.exe is installed on all client computers. Multiple versions of Appl.exe are installed on different client computers. Appl.exe is digitally signed.
You need to ensure that only the latest version of Appl.exe can run on the client computers. What should you create?
A. an application control policy executable rule
B. an application control policy Windows Installer rule
C. an application control policy packaged app rule
D. a software restriction policy certificate rule

Answer 20

A

Question 21

QUESTION 206
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
The domain contains a server named Server1 that runs Windows Server 2012 R2.
You need to ensure that when users log on to Server1, their user account is added automatically to a local group named Group1 during the log on process.
Which Group Policy settings should you modify?
A. User Rights Assignment
B. Preferences
C. Security Options
D. Restricted Groups

Answer 21

B

Question 22

QUESTION 210
Your network contains an Active Directory domain named contoso.com. The domain contains a user account named User1 that resides in an organizational unit (OU) named OU1.
A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to publish several applications to a user named User1.
In the Users container, you create a new user named User2.
You need to ensure that the same applications are published to User2. What should you do?
A. Modify the settings in GPO1.
B. Move User2 to OU1
C. Link a WMI filter to GPO1.
D. Modify the security of GPO1.

Answer 22

B

Question 23

QUESTION 125
Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains user accounts and computer accounts.
A Group Policy object (GPO) named GP1 is linked to the domain.GP1 contains Computer Configuration settings and User Configuration settings.
You need to prevent the User Configuration settings in GP1 from being applied to users. The solution must ensure that the Computer Configuration settings in GP1 are applied to all client computers.
What should you configure?
A. The GPO Status
B. The Block Inheritance feature
C. The Group Policy loopback processing mode
D. The Enforced setting

Answer 23

C

Question 24

QUESTION 168
Your network contains an Active Directory domain named contoso.com. The domain contains 100 user accounts that reside in an organizational unit (OU) named OU1.
You need to ensure that a user named User1 can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize the number of permissions assigned to User1.
What should you do?
A. Run the Delegation of Control Wizard on OU1.
B. Run the Delegation of Control Wizard on the Policies container.
C. Add User1 to the Group Policy Creator Owners group.
D. Modify the permissions on the User1 account.

Answer 24

A