M5L1 Flashcards

1
Q

Which statement(s) is/are valid regarding the Default Domain Policy GPO.

> Applies to all users and computer accounts in Active Directory

> The Default policy an be limited to apply to specific users and/or specific computers by using the WMI filter

> The Default Domain Policy can not be limited to specific users and/or specific computers

> Filtered Domain GPO are identified by the blue exclamation

A

Applies to all users and computer accounts in Active Directory

The Default policy an be limited to apply to specific users and/or specific computers by using the WMI filter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
1
Q

(True or False) Group Policies can be used to prevent a user from being able to access the Control Panel or specific Control Panel options.

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does the “Enforce user logon restrictions” option do when configuring Kerberos?

> It turns on Kerberos security.

> It forces the application of user configuration options defined by Group Policy.

> It forces a user to be subject to logon restrictions defined in the user’s properties under Active Directory Users and Computers.

> It enforces the account password configuration options defined in Group Policy during the login phase.

A

It turns on Kerberos security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Group Policy preferences allow you to specify the configuration action that must be performed. Which of the following are a configuration action that can be performed.

> Create configures a new feature only if it does not already exist

> Replace an existing feature with a new one

> Update modifies a previously configured feature to include new settings

> Delete removed a feature if it was previously configured

A

All of the Above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

(True or False) Software that is typically hosted in a shared folder on a file server and packaged by supplying UNC path to to a .msi file for use with GPO to deploy software.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which of the following items can you manage using group policies?

> Change password policies

> Mapping of shares

> Startup, shutdown of computers

> Deployment of software

> Restrict current applications from running

> Sharing files

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

(True or False) Group Policies are one of the top reason to deploy Active Directory as it allows you to manage user and computer objects in the forest.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

(True or False) Many third party software manufactures allow you to download and install administrative template files that can be imported into and used with a GPO.
Group of answer choices

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following statement related to using GPO to push out software is incorrect.

> Software that is Published under software setting in the user configuration of a GPO

> Software that is Assigned under software setting in the user configuration of a GPO

> Software that is Assigned under the software setting in the domain controller GPO

> Software that is Assigned under the software setting in the computer configuration GPO

> none, all are valid options to deploy software

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Requires passwords be unique before a password can be reused

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A value of zero ensure that password do not expire

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Defines how long a password must exist before it can be changed

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Defines the number of characters required

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Requires at least a 6 character password, requires a combination of upper and lower numbers and special characters

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Used to support legacy authentication protocols

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following are active directory objects where policies can be assigned?

> Local Group Policies

> Site Group Policies

> Domain Group Policies

> Organizational Unit Group Policies

> Child Organizational Unit Group Policies

A
16
Q

(True or False) Group policies listed higher in the Group Policy list have higher precedence than policies listed lower in the list.

A

True

17
Q

(True or False) Account lockout policy allows a server administrator to automatically lock a user account after a unsuccessful login attempts.

A

True

18
Q

(True or False) You must save GPO for any new or modified setting to take effect.

A

False

19
Q

(True or False) A policy applied to a parent object is passed down to a child object.

A

True

20
Q

(True or False) If using both local and Active Directory policies are being used, the local polices will be applied before the AD policies.

A

True

21
Q

(True or False) Policies that are not configured are automatically set to disabled.

A
22
Q

(True or False) If you need to reset settings in the Default Domain Policy or Default Controller Policy, returning it back to their default values you can run dcgpofix.exe command in PowerShell or a command prompt.

A

True