Chapter 6

Question 1

True or False? The Group Policy Inventory tool provides an inventory list of Group Policy Objects (GPOs) and many other computer and user settings.

Answer 1

True

Question 2

True or False? The order in which GPOs are applied enables you to put more generic settings in GPOs that Windows applies first, and more specific settings in GPOs that Windows applies later in the process.

Answer 2

True

Question 3

An organization’s Group Policy definition should satisfy which of the following?
* Domain environment
* Security policy
* Local network
* IT security personnel

Answer 3

Security Policy

Question 4

When will online laptops receive the GPO after Yasmin forces a GPO refresh using Remote Group Policy Update?

Answer 4

Online laptops will apply the GPO within 10 minutes.

Question 5

True or False? Windows Group Policy provides a set of rules that govern the way Windows operates.

Answer 5

True

Question 6

What is the actual minimum password length of Brian’s password given the defined policies?

Answer 6

15 characters

Question 7

True or False? The Resultant Set of Policy (RSOP) tool shows the specific settings that will result from applying GPOs to a specific user logged on to a specific computer.

Answer 7

True

Question 8

True or False? You can define organizational units (OUs) to logically group computers into functional groups, such as ‘Accounting’ and ‘Manufacturing.’

Answer 8

True

Question 9

True or False? The Group Policy Inventory tool can immediately deploy and apply Group Policy Objects (GPOs).

Answer 9

False

Question 10

True or False? Active Directory Group Policy Objects (GPOs) are created using the Group Policy Management Console (GPMC).

Answer 10

True

Question 11

True or False? Local Group Policy Objects (GPOs) do nothing until they are linked to one or more containers.

Answer 11

True

Question 12

The Group Policy Inventory tool (gpinventory.exe) is most useful for which of the following?

Answer 12

• Analyzing the effect of GPOs
• Auditing GPOs

Question 13

True or False? Once you design and deploy Group Policy Objects (GPOs) to support your security policy, it is important to validate your Group Policy to ensure that you have defined the right GPOs.

Answer 13

True

Question 14

For a Group Policy Object (GPO) to become active, it must be linked to at least one computer, __________, or an organization unit.

Answer 14

user group

Question 15

Which of the following is true of Group Policy Settings?

Answer 15

• Group Policy Settings apply many settings to the current session.

Question 16

In the lab, you created a Group Policy Objects Report and a Resultant Set of Policy Report that can be used to __________ the group policies.

Answer 16

document and audit

Question 17

Which of the following is a command-line tool that shows the specific settings that will result from applying Group Policy Objects to specific users logged in to specific computers?

Answer 17

Resultant Set of Policy (RSoP)

Question 18

What happens when Group Policy Objects (GPOs) at different levels are in conflict?

Answer 18

The GPO at the higher level takes precedence.

Question 19

In the case of password policies, every existing policy except the option to __________ will harden security on a member computer.

Answer 19

store passwords using reversible encryption

Question 20

Which of the following should contain Devaki’s global GPO settings?

Answer 20

Domain GPOs

Question 21

Which tool can be used to change the behavior of how Windows applies Group Policy Objects (GPOs) to all computers and users in an organizational unit (OU) container?

Answer 21

Active Directory Group Policy Editor

Question 22

Of the following, which is the lowest priority for GPOs?

Answer 22

Organizational unit GPOs

Question 23

Where does Windows store Active Directory Group Policy Objects (GPOs)?

Answer 23

On the domain controller in the Policies folder

Question 24

True or False? A best practice is to modify default policies rather than creating new Group Policy Objects (GPOs).

Answer 24

False

Question 25

For Group Policy settings stored in the Windows Registry, which of the following should be used to modify the Group Policy Object (GPO) data?

Answer 25

Use the Local Group Policy Editor to edit Registry settings. Use the Registry Editor only as a last resort.

Question 26

What can Lin run to view the actual effect of the GPO before deploying the change?

Answer 26

RSOP run in planning mode

Question 27

True or False? In the context of Group Policy Object (GPO) settings, the scope of any control is determined by the boundaries of the organization's network.

Answer 27

True

Question 28

Which of the following is the correct process for making Group Policy conform to an organization's security policy?

Answer 28

Identify GPO settings in the default Windows templates that satisfy part of your security policy and activate them. Identify elements in your security policy that do not exist in the default Windows templates and create new GPOs.

Question 29

Which resource helps identify Group Policy configuration errors or dependency issues that may prevent settings from functioning as expected?

Answer 29

Group Policy Best Practices Analyzer

Question 30

In the lab, you used the __________ to edit domain-level Group Policy Objects.

Answer 30

Group Policy Management Console (GPMC)

Question 31

Defining a domain-wide policy for the Windows Event Log is important to ensure that valuable audit data:

Answer 31

is not accidentally deleted.