chap 8
you have created a group policy that prevents users in the accounting department from
accessing database. group policy is configgured to disable search function for all users
in accounting ou
what can you do to prevent the group policy object from applying to members of the
managers group - Answer add the managers group to the gpos DACL. deny apply
group policy and read permissions to managers group
You are the network administrator for your network. You network consists of a single
Active Directory domain. All servers run Windows Server 2012 R2. Your company
recently mandated The following user account criteria: - Answer Set Minimum password
length to 12
Set account lockout duration to 0
Set account lockout threshold to 3
You are the security administrator for a large metropolitan school district. You are
reviewing security standards with the network for the high school. - Answer Configure
the Computer configuration node of the computer center security GPO and restrict
software to Internet Explorer only. Link the GPO to the domain and allow access to the
computer center computers group only.
You are the Administrator for a network with a single active directory domain named
widgets.local . The widgets.local domain has an Organizational Unit object for each
major department in the company, including the Information Systems department.
On the Group Policy object's access control list, deny the Apply Group Policy
permission for members of the Domain Admins group. - Answer On the Group Policy
object's access control list, deny the Apply Group Policy permission for members of the
Domain Admins group.
Your network has a single active directory forest with two domains: eastsim.private and
HQ.eastsim.private. Organizational units Accounting, Marketing, and Sales represent
departments of the HQ domain. - Answer eastsim.private-Password Settings
HQ eastsim.private-Password settings
Accounting- Accounting App
Marketing- Desktop Settings
Sales- Desktop Settings
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
been moved into their respective departmental OUs. From your workstation, you create
a GPO that configures settings from a custom .admx file. You link the GPO to the sales
OU. - Answer Enable the administrative Templates central store in Active Directory.
Copy the .admx file to the central store location.
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
, chap 8
been moved into their respective departmental OUs. As part of your security plan, you
ahve analyzed the use of Internet Explorer in your organization - Answer Create three
starter GPOs with the necessary settings. When creating the GPOs, select the starter
GPO with the desired settings.
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
been moved into their respective departmental OUs. As you manage Group Policy
objects, you find that you often make similar user rights, security options, and
Administrative Template settings in different GPOs.
Create GPOs with the common settings. when creating new GPOs, copy one of the
existing GPOs.
Create GPOs with the common settings. Take a backup of each GPO. After creating
new GPOs, import the settings from one of the backed up GPOs. - Answer Create
GPOs with the common settings. when creating new GPOs, copy one of the existing
GPOs.
Create GPOs with the common settings. Take a backup of each GPO. After creating
new GPOs, import the settings from one of the backed up GPOs.
You are the administrator for the widgets.com domain. Organizational unit have been
created for each company department. User and computer accounts for each
department have been moved into their repective departmental OUs. You have two
OUs that contain temporary users: - Answer User Rights
You are the administrator for the widgets.com domain. Organizational unit have been
created for each company department. User and computer accounts for each
department have been moved into their repective departmental OUs. You would like to
configure all computers in the Sales OU to prevent the installation of unsigned drivers. -
Answer Security options
You are the network Administrator for eastsim.com . The network consists of one Active
Directory domain. All the servers run Windows Server 2012 R2. All the clients run
Windows 8.1 . The company has a main office in New York and several international
locations including facilities in Germany and France. - Answer Copy the German .ADML
files to the appropriate directory in the SYSVOL on a local domain controller.
Your network consists of a single Active Directory domain. The OU structure of the
domain consists of a parent OU named HW_West, and child OUs of research, HR,
Finance, sales, and operations. - Answer Link DefaultSec to the HQ_West OU.
Link HiSec to the HR and Research OUs.
Configure password policies on a GPO linked to the domain.
You've just deployed new active Directory domain, as shown in the figure below. You
need to deploy Group Policy objects to apply configuration settings and enforce security
policies. - Answer Corp
Domain Controllers
you have created a group policy that prevents users in the accounting department from
accessing database. group policy is configgured to disable search function for all users
in accounting ou
what can you do to prevent the group policy object from applying to members of the
managers group - Answer add the managers group to the gpos DACL. deny apply
group policy and read permissions to managers group
You are the network administrator for your network. You network consists of a single
Active Directory domain. All servers run Windows Server 2012 R2. Your company
recently mandated The following user account criteria: - Answer Set Minimum password
length to 12
Set account lockout duration to 0
Set account lockout threshold to 3
You are the security administrator for a large metropolitan school district. You are
reviewing security standards with the network for the high school. - Answer Configure
the Computer configuration node of the computer center security GPO and restrict
software to Internet Explorer only. Link the GPO to the domain and allow access to the
computer center computers group only.
You are the Administrator for a network with a single active directory domain named
widgets.local . The widgets.local domain has an Organizational Unit object for each
major department in the company, including the Information Systems department.
On the Group Policy object's access control list, deny the Apply Group Policy
permission for members of the Domain Admins group. - Answer On the Group Policy
object's access control list, deny the Apply Group Policy permission for members of the
Domain Admins group.
Your network has a single active directory forest with two domains: eastsim.private and
HQ.eastsim.private. Organizational units Accounting, Marketing, and Sales represent
departments of the HQ domain. - Answer eastsim.private-Password Settings
HQ eastsim.private-Password settings
Accounting- Accounting App
Marketing- Desktop Settings
Sales- Desktop Settings
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
been moved into their respective departmental OUs. From your workstation, you create
a GPO that configures settings from a custom .admx file. You link the GPO to the sales
OU. - Answer Enable the administrative Templates central store in Active Directory.
Copy the .admx file to the central store location.
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
, chap 8
been moved into their respective departmental OUs. As part of your security plan, you
ahve analyzed the use of Internet Explorer in your organization - Answer Create three
starter GPOs with the necessary settings. When creating the GPOs, select the starter
GPO with the desired settings.
You are the administrator for the widgets.com domain. Organizational Units have been
created for each company department. User and accounts for each department have
been moved into their respective departmental OUs. As you manage Group Policy
objects, you find that you often make similar user rights, security options, and
Administrative Template settings in different GPOs.
Create GPOs with the common settings. when creating new GPOs, copy one of the
existing GPOs.
Create GPOs with the common settings. Take a backup of each GPO. After creating
new GPOs, import the settings from one of the backed up GPOs. - Answer Create
GPOs with the common settings. when creating new GPOs, copy one of the existing
GPOs.
Create GPOs with the common settings. Take a backup of each GPO. After creating
new GPOs, import the settings from one of the backed up GPOs.
You are the administrator for the widgets.com domain. Organizational unit have been
created for each company department. User and computer accounts for each
department have been moved into their repective departmental OUs. You have two
OUs that contain temporary users: - Answer User Rights
You are the administrator for the widgets.com domain. Organizational unit have been
created for each company department. User and computer accounts for each
department have been moved into their repective departmental OUs. You would like to
configure all computers in the Sales OU to prevent the installation of unsigned drivers. -
Answer Security options
You are the network Administrator for eastsim.com . The network consists of one Active
Directory domain. All the servers run Windows Server 2012 R2. All the clients run
Windows 8.1 . The company has a main office in New York and several international
locations including facilities in Germany and France. - Answer Copy the German .ADML
files to the appropriate directory in the SYSVOL on a local domain controller.
Your network consists of a single Active Directory domain. The OU structure of the
domain consists of a parent OU named HW_West, and child OUs of research, HR,
Finance, sales, and operations. - Answer Link DefaultSec to the HQ_West OU.
Link HiSec to the HR and Research OUs.
Configure password policies on a GPO linked to the domain.
You've just deployed new active Directory domain, as shown in the figure below. You
need to deploy Group Policy objects to apply configuration settings and enforce security
policies. - Answer Corp
Domain Controllers
