Final Theory Flashcards

1
Q

Two components of a GPO

A

Group Policy Container (GPC), Group Policy Template (GPT).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Group Policy Container (GPC)

A

An AD object stored in the GPO container with the domain naming content. It defines basic attributes of the GPO but does not contain any settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Group Policy Template (GPT)

A

Contains the settings of a GPO which is stored in the SYSVOL of each domain controller.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

GPO Backups

A

You can back up all or individual GPOs in GPMC. Each time a backup is performed a new backup version of the GPO is created.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Importing GPOs

A

Only imports the GPO settings, no links or security principals assigned to it. Imported settings overwrite existing settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Copying GPOs

A

Can be same or different domain. When pasted, becomes ‘copy of old_name’. If copied between, security principals need to be redefined.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Migration Table

A

File that maps references to users, groups, computers, and UNC paths in source GPO to new values in destination GPO. Consists of one or more mapping entries. When importing with migration table, each reference in source is replaced with a target reference.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How to restore either or both Default Domain Policy or Default Domain Controllers Policy?

A

DCGPOFix.exe (DcGPOFix command in command prompt).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Group Policy Preferences (GPP)

A

Made up of more than 20 new GP client-side extensions (CSEs), expands range of configurable settings in a GPO. Refreshes at the same interval as GP settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Preferences that support editing states

A

Start Menu, Regional and Language, Internet options, Folder options, Power options

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to toggle editing states?

A

F5: Enable all, F6: Enable current, F7: Disable current, F8: Disable all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Preference action options

A

Create, Replace, Update, Delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Create (Preference action options)

A

Create new preference setting for user/computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Replace (Preference action options)

A

Delete and recreate preference setting for the user/computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Update (Preference action options)

A

Modify an existing preference setting for user/computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Delete (Preference action options)

A

Remove an existing preference setting for the user/computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Create (File Preference action options)

A

Copy a file/files from source to destination if it doesn’t exist and configure attributes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Replace (File Preference action options)

A

Delete a file/files, replace with another file/files, and configure attributes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Update (File Preference action options)

A

Modify settings of existing file/files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Delete (File Preference action options)

A

Remove a file/files for computers/users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Folder Preference action options

A

Same as File preference action options

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Item-Level Targeting

A

Used to change the scope of individual preference items so that the preference items apply to only selected users/computers.

23
Q

Windows Deployment Services (WDS)

A

Software based platform and technology allowing automated network-based installations based on network-based boot and installation media. Includes two services: Deployment/Transport Server.

24
Q

Image File

A

Snapshot of a computer’s hard drive taken at a particular moment in time. Contains all operating system files, any updates and drivers, any applications, any configuration changes.

25
Q

Preboot Execution Environment (PXE)

A

A technology that boots computers using the network interface without a data storage device. Needed for client computers to communicate with a WDS server without an OS. Must be configured in BIOS.

26
Q

Windows Preinstallation Environment (Windows PE)

A

Loaded from boot image downloaded when PXE is used with WDS. WPE is a minimal WinOS with limited services which is then used to install the OS.

27
Q

WDS Requirements

A

Member of AD domain/domain controller for domain, active DHCP and DNS present, WDS server has NTFS partition to store images.

28
Q

Two Types of Image Formats

A

Sector-based/File-based image formats

29
Q

Sector-Based Image Formats

A

Each sector is stored within the file and each sector is the smallest unit

30
Q

File-Based Image Formats

A

Each file is the smallest unit. Advantage: hardware-independent and files can be referenced multiple times

31
Q

Windows Imaging Format (WIM)

A

Used by boot and install images, is a file format that allows a file structure to be stored inside a single WIM database.

32
Q

Windows Server boot image file

A

Named boot.wim, located in \sources. Can be used in deployment of any OS without modification.

33
Q

res.rwm

A

The resource .wim file, contains file resources for all of the images in an image group.

34
Q

Windows Deployment Services Capture Utility

A

Used to create image files which can be deployed to other computers.

35
Q

System Preparation Utility (Sysprep.exe)

A

Prepares Windows computer for cloning by removing specific computer information. On 2012 R2 is located in C:\Windows\System32\Sysprep.

36
Q

Discover Image

A

Image file that can be burned to a CD-ROM or other boot medium and used to network boot a PC that doesn’t support PXE boot.

37
Q

Answer Files

A

Provide responses to prompts during Windows installation, used to automate this process.

38
Q

System Image Manager (SIM)

A

A tool used to create and manage unattended answer files using a GUI, is a part of Windows Assessment and Deployment Kit.

39
Q

What are the seven configuration passes in an answer file?

A

Windows PE, offlineServicing, generalize, specialize, auditSystem, auditUser, oobeSystem

40
Q

Deployment Image Servicing and Management (Dism.exe)

A

A command-line tool used to service a Windows Image or prepare a Windows PE image.

41
Q

Dynamic Driver Provisioning

A

Included with WDS starting with 2008 R2, allows to add driver packages to WDS and deploy when you deploy an image. Requires boot image from Windows 7+, Windows server 2008 R2+ and install images from Windows Vista Sp1+ including windows server +

42
Q

Out-of-band Patches

A

Released at other times besides Patch Tuesday when the patches are critical or time-sensitive.

43
Q

Out-of-band Updates

A

Updates released as needed

44
Q

Update Classifications

A

Important, Recommended, Optional

45
Q

Windows Update update types

A

Security Update, Critical Update, Service Pack

46
Q

Hotfix

A

A single cumulative package that includes one or more files that are used to address a problem in a software product.

47
Q

Cumulative Patch

A

Multiple hotfixes combined into a single package.

48
Q

Windows Server Update Services (WSUS)

A

A program that allows admins to manage the distribution of updates and other patches to computers within an organization.

49
Q

WSUS Modes

A

Autonomous Mode, Replica Mode

50
Q

Minimum Requirements for WSUS

A

1.4 GHz x64 bit processor, 2GB (Windows Server) + 1.5 GB RAM, 10 GB disk space, 100Mbps network adapter, .NET Framework 4.0 etc.

51
Q

Methods for assigning WSUS computer groups

A

Server-side targeting (manual), Client-side targeting (auto assigned by GP)

52
Q

WSUSutil.exe

A

Located in %drive%\Program Files\Update Services\Tools folder, allows to manage the WSUS from command line.

53
Q

Service Account general rule

A

Use the account with minimum rights and permissions for the service to operate.