M5L1 Flashcards
Which statement(s) is/are valid regarding the Default Domain Policy GPO.
> Applies to all users and computer accounts in Active Directory
> The Default policy an be limited to apply to specific users and/or specific computers by using the WMI filter
> The Default Domain Policy can not be limited to specific users and/or specific computers
> Filtered Domain GPO are identified by the blue exclamation
Applies to all users and computer accounts in Active Directory
The Default policy an be limited to apply to specific users and/or specific computers by using the WMI filter
(True or False) Group Policies can be used to prevent a user from being able to access the Control Panel or specific Control Panel options.
true
What does the “Enforce user logon restrictions” option do when configuring Kerberos?
> It turns on Kerberos security.
> It forces the application of user configuration options defined by Group Policy.
> It forces a user to be subject to logon restrictions defined in the user’s properties under Active Directory Users and Computers.
> It enforces the account password configuration options defined in Group Policy during the login phase.
It turns on Kerberos security.
Group Policy preferences allow you to specify the configuration action that must be performed. Which of the following are a configuration action that can be performed.
> Create configures a new feature only if it does not already exist
> Replace an existing feature with a new one
> Update modifies a previously configured feature to include new settings
> Delete removed a feature if it was previously configured
All of the Above
(True or False) Software that is typically hosted in a shared folder on a file server and packaged by supplying UNC path to to a .msi file for use with GPO to deploy software.
True
Which of the following items can you manage using group policies?
> Change password policies
> Mapping of shares
> Startup, shutdown of computers
> Deployment of software
> Restrict current applications from running
> Sharing files
(True or False) Group Policies are one of the top reason to deploy Active Directory as it allows you to manage user and computer objects in the forest.
True
(True or False) Many third party software manufactures allow you to download and install administrative template files that can be imported into and used with a GPO.
Group of answer choices
True
Which of the following statement related to using GPO to push out software is incorrect.
> Software that is Published under software setting in the user configuration of a GPO
> Software that is Assigned under software setting in the user configuration of a GPO
> Software that is Assigned under the software setting in the domain controller GPO
> Software that is Assigned under the software setting in the computer configuration GPO
> none, all are valid options to deploy software
Requires passwords be unique before a password can be reused
A value of zero ensure that password do not expire
Defines how long a password must exist before it can be changed
Defines the number of characters required
Requires at least a 6 character password, requires a combination of upper and lower numbers and special characters
Used to support legacy authentication protocols