Group Policy
You are the administrator of the westsim.com Active Directory domain.
You delegate administration of the Sales OU and Research OU to other administrators.
You want to prevent the administrators of those OUs from creating any other Group
Policy objects with settings that conflict with those you have configured for the domain.
What should you do? - Answer In Group Policy objects linked to the westsim.com
domain, set the Enforced option.
You are the Administrator for a network with a single active directory domain named
widgets.local . The widgets.local domain has an Organizational Unit object for each
major department in the company, including the Information Systems department. -
Answer On the Group Policy object's access control list, deny the Apply Group Policy
permission for members of the Domain Admins group.
You are a domain administrator for a single-domain network. The domain has several
organizational units (OUs) representing each department in the organization. You have
delegated complete administration for each OU to appropriate users in each
department. You have made these users members of the Group Policy Creator Owners
group.
You create a Group Policy Object (GPO) named Corporate Desktop that configures the
desktop environment for users in the company. You link the GPO to the domain.
Later, you discover that some of the settings are not being applied to users in the
Development department.
How can you make sure that all settings in the Corporate Desktop GPO get applied to
all users in the company? - Answer Configure the Enforced option for the Corporate
Desktop GPO
Your network has a single Active Directory forest with two domains: eastsim.private and
HQ.eastsim.private.
You are in the process of designing Group Policy for the network.
-You create a GPO called AutoEnroll that automatically enrolls user certificates. -
Answer eastsim.private: AutoEnroll GPO
HQ.eastsim.prvate: AutoEnroll GPO /./ CustomAPP GPO
Accounting: MyDoc Redirect GPO /./ No Override
Marketing: (leave blank)
Sales: (leave blank)
Your network has a single Active Directory forest with two domains: eastsim.private and
HQ.eastsim.private.
You are in the process of designing Group Policy for the network. You want to
accomplish the following goals:
-You want to enforce strong passwords throughout the entire forest for all computers. -
Answer eastsim.private: Password Settings
HQ.eastsim.private: Password Settings
Accounting: Accounting App
,Group Policy
Marketing: Desktop Settings
Sales: Desktop Settings
You are the administrator for WestSim Corporation. The network has a single domain,
westsim.com, running at Windows Server 2008 functional level. - Answer Enable
loopback processing in the SKUWare GPO
Your network consists of a single Active Directory domain.
You also want to ensure that all client computers have strong password policies applied,
and that an administrator is required to unlock locked user accounts for the Research
and Human Resources departments. - Answer Link DefaultSec to the HQ_West OU
Configure password policies on a GPO linked to the domain
Link HiSec to the HR and Research OUs
You are the network administrator for westsim.com. The network consists of a single
domain. All the servers run Windows Server 2012 R2. All the clients run Windows 8.
there is a main office located in New York and a branch office located in Los Angeles.
You have been directed to set up wireless access for clients in the New York office. You
create a new Group Policy Object (GPO) that specifies the wireless network settings for
the New York office and link it to the New York site. Users from the Los Angeles office
complain that when they travel to New York they are unable to connect to the wireless
network in New York. Your need to enable the traveling users to connect to the wireless
network.
What should you do? - Answer Direct the visiting users to first connect to the New York
network using a wired connection to receive the wireless network settings.
To speed up the boot process for hosts in your domain, you want to reconfigure Group
Policy processing so that computers download the latest version of your policies and
store them locally. - Answer Enable Group Policy Caching for Servers
You have enabled Group Policy caching in your domain. Using this feature, Group
Policy settings are saved locally on each domain-joined host. - Answer C:\Windows\
System32\GroupPolicy\datastore
You are the administrator for the widgets.com domain. Organizational Units (OUs) have
been created for each company department. User and computer accounts for each
department have been moved into their respective departmental OUs. - Answer Enable
the Administrative Templates central store in Active Directory. Copy the .admx file to the
central store location.
You are the network administrator for eastsim.com.
, Group Policy
You have been asked to build a domain controller that will be deployed to the
eastsim.com office in Germany. - Answer Copy the German .ADML files to the
appropriate directory in the SYSVOL on a local domain controller.
You need to add Spanish language support for your administrative templates to a
Windows Server 2012 R2 system. - Answer .adml files
You need to add administrative templates for Microsoft Office products to a Window
Server 2012 R2 server. - Answer C:\Windows\PolicyDefinitions
You want to create a central store for the administrative templates on a Windows Server
2012 R2 domain controller. - Answer Copy the local .admx and .adml files to C:\
Windows\SYSVOL\domain_name\Policies\PolicyDefinitions
You need to add German language support for your administrative templates to a
Windows Server 2012 R2 system. - Answer .admx files
You are the desktop administrator for your company. You manage a group of windows 8
Professional computers used by a part-time sales staff. - Answer Redirect each part-
time sales employee's Documents folder to a folder on a network share.
You have decided to redirect the contents of the local Documents folder for all domain
users on all workstations to the C:\Shares shared folder on a Windows Server 2012
system named FS2. The server is a member of the eastsim.com domain.
You configured Basic redirection to redirect all users' local Documents folder to C:\
Shares on the server. However, after applying the policy, you find that shared folder on
the server remains empty.
Click on the setting in the folder redirection policy for Documents that is configured
incorrectly. - Answer Root Path: C:\Shares
You have decided to redirect the contents of the local Documents folder for all domain
users on all workstations to the C:\Shares shared folder on a Windows Server 2012
system named FS1. - Answer Move the contents of Documents to the new location.
Redirect the folder back to the local userprofile location when policy is removed.
You have decided to redirect the contents of the local Document folder for all domain
users on all workstations to a Windows Server 2012 system named FS3. - Answer
Settings: Basic - Redirect everyone's folder to the same location
on all workstations to a Windows Server 2012 system named FS3. The server is a
member of
the eastsim.com domain.
You are the administrator of the westsim.com Active Directory domain.
You delegate administration of the Sales OU and Research OU to other administrators.
You want to prevent the administrators of those OUs from creating any other Group
Policy objects with settings that conflict with those you have configured for the domain.
What should you do? - Answer In Group Policy objects linked to the westsim.com
domain, set the Enforced option.
You are the Administrator for a network with a single active directory domain named
widgets.local . The widgets.local domain has an Organizational Unit object for each
major department in the company, including the Information Systems department. -
Answer On the Group Policy object's access control list, deny the Apply Group Policy
permission for members of the Domain Admins group.
You are a domain administrator for a single-domain network. The domain has several
organizational units (OUs) representing each department in the organization. You have
delegated complete administration for each OU to appropriate users in each
department. You have made these users members of the Group Policy Creator Owners
group.
You create a Group Policy Object (GPO) named Corporate Desktop that configures the
desktop environment for users in the company. You link the GPO to the domain.
Later, you discover that some of the settings are not being applied to users in the
Development department.
How can you make sure that all settings in the Corporate Desktop GPO get applied to
all users in the company? - Answer Configure the Enforced option for the Corporate
Desktop GPO
Your network has a single Active Directory forest with two domains: eastsim.private and
HQ.eastsim.private.
You are in the process of designing Group Policy for the network.
-You create a GPO called AutoEnroll that automatically enrolls user certificates. -
Answer eastsim.private: AutoEnroll GPO
HQ.eastsim.prvate: AutoEnroll GPO /./ CustomAPP GPO
Accounting: MyDoc Redirect GPO /./ No Override
Marketing: (leave blank)
Sales: (leave blank)
Your network has a single Active Directory forest with two domains: eastsim.private and
HQ.eastsim.private.
You are in the process of designing Group Policy for the network. You want to
accomplish the following goals:
-You want to enforce strong passwords throughout the entire forest for all computers. -
Answer eastsim.private: Password Settings
HQ.eastsim.private: Password Settings
Accounting: Accounting App
,Group Policy
Marketing: Desktop Settings
Sales: Desktop Settings
You are the administrator for WestSim Corporation. The network has a single domain,
westsim.com, running at Windows Server 2008 functional level. - Answer Enable
loopback processing in the SKUWare GPO
Your network consists of a single Active Directory domain.
You also want to ensure that all client computers have strong password policies applied,
and that an administrator is required to unlock locked user accounts for the Research
and Human Resources departments. - Answer Link DefaultSec to the HQ_West OU
Configure password policies on a GPO linked to the domain
Link HiSec to the HR and Research OUs
You are the network administrator for westsim.com. The network consists of a single
domain. All the servers run Windows Server 2012 R2. All the clients run Windows 8.
there is a main office located in New York and a branch office located in Los Angeles.
You have been directed to set up wireless access for clients in the New York office. You
create a new Group Policy Object (GPO) that specifies the wireless network settings for
the New York office and link it to the New York site. Users from the Los Angeles office
complain that when they travel to New York they are unable to connect to the wireless
network in New York. Your need to enable the traveling users to connect to the wireless
network.
What should you do? - Answer Direct the visiting users to first connect to the New York
network using a wired connection to receive the wireless network settings.
To speed up the boot process for hosts in your domain, you want to reconfigure Group
Policy processing so that computers download the latest version of your policies and
store them locally. - Answer Enable Group Policy Caching for Servers
You have enabled Group Policy caching in your domain. Using this feature, Group
Policy settings are saved locally on each domain-joined host. - Answer C:\Windows\
System32\GroupPolicy\datastore
You are the administrator for the widgets.com domain. Organizational Units (OUs) have
been created for each company department. User and computer accounts for each
department have been moved into their respective departmental OUs. - Answer Enable
the Administrative Templates central store in Active Directory. Copy the .admx file to the
central store location.
You are the network administrator for eastsim.com.
, Group Policy
You have been asked to build a domain controller that will be deployed to the
eastsim.com office in Germany. - Answer Copy the German .ADML files to the
appropriate directory in the SYSVOL on a local domain controller.
You need to add Spanish language support for your administrative templates to a
Windows Server 2012 R2 system. - Answer .adml files
You need to add administrative templates for Microsoft Office products to a Window
Server 2012 R2 server. - Answer C:\Windows\PolicyDefinitions
You want to create a central store for the administrative templates on a Windows Server
2012 R2 domain controller. - Answer Copy the local .admx and .adml files to C:\
Windows\SYSVOL\domain_name\Policies\PolicyDefinitions
You need to add German language support for your administrative templates to a
Windows Server 2012 R2 system. - Answer .admx files
You are the desktop administrator for your company. You manage a group of windows 8
Professional computers used by a part-time sales staff. - Answer Redirect each part-
time sales employee's Documents folder to a folder on a network share.
You have decided to redirect the contents of the local Documents folder for all domain
users on all workstations to the C:\Shares shared folder on a Windows Server 2012
system named FS2. The server is a member of the eastsim.com domain.
You configured Basic redirection to redirect all users' local Documents folder to C:\
Shares on the server. However, after applying the policy, you find that shared folder on
the server remains empty.
Click on the setting in the folder redirection policy for Documents that is configured
incorrectly. - Answer Root Path: C:\Shares
You have decided to redirect the contents of the local Documents folder for all domain
users on all workstations to the C:\Shares shared folder on a Windows Server 2012
system named FS1. - Answer Move the contents of Documents to the new location.
Redirect the folder back to the local userprofile location when policy is removed.
You have decided to redirect the contents of the local Document folder for all domain
users on all workstations to a Windows Server 2012 system named FS3. - Answer
Settings: Basic - Redirect everyone's folder to the same location
on all workstations to a Windows Server 2012 system named FS3. The server is a
member of
the eastsim.com domain.
