Chapter 010 Planning a Group Policy Management and Implementation Strategy in Windows 2008 R2

Card Set Information

Author:
pacheco2001usa
ID:
220081
Filename:
Chapter 010 Planning a Group Policy Management and Implementation Strategy in Windows 2008 R2
Updated:
2013-05-17 23:34:05
Tags:
Chapter 010 Planning Group Policy Management Implementation Strategy Windows 2008 R2
Folders:

Description:
Chapter 010 Planning a Group Policy Management and Implementation Strategy in Windows 2008 R2
Show Answers:

Home > Flashcards > Print Preview

The flashcards below were created by user pacheco2001usa on FreezingBlue Flashcards. What would you like to do?


  1. What MMC snap-in provides a single access point to all aspects of Group Policy that were previously spread across other tools such as Active Directory Users and Computers, Active Directory Sites and Services, Resultant Set of Policy (RSoP), and the Group Policy Management Editor?
    a) Group Policy Editor
    b) Group Policy Management
    c) GPEdit
    d) GPUpdate
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: The Group Policy Management MMC snap-in is a tool for managing Windows Server 2008, Windows Server 2003, and Windows 2000 Active Directory domains. The Group Policy Management MMC provides a single access point to all aspects of Group Policy that were previously spread across other tools such as Active Directory Users and Computers, Active Directory Sites and Services, Resultant Set of Policy (RSoP), and the Group Policy Management Editor.
  2. Which of the following can be done from the Group Policy Management snap-in?
    a) import and copy GPO settings to and from the file system
    b) search for GPOs based on name, permissions, WMI filter, GUID, or policy extensions set in the GPOs
    c) search for individual settings within a GPO by keyword, and search for only those settings that have been configured
    d) all of the above
    • Ans: d
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: The Group Policy Management Console allows you to import and copy GPO settings to and from the file system; search for GPOs based on name, permissions, WMI filter, GUID, or policy extensions set in the GPOs; search for individual settings within a GPO by keyword; and search for only those settings that have been configured
  3. Group Policy Management started being natively installed with what version of Windows Server?
    a) NT 4
    b) 2000
    c) 2003
    d) 2008
    • Ans: d
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: GPMC is natively installed with Windows Server 2008. In previous versions of the operating system, it needed to be manually downloaded from the Microsoft Web site.
  4. What tab displays groups and users with permission to link, perform modeling analyses, or read Group Policy Results information?
    a) Linked Group Policy Objects
    b) Group Policy Inheritance
    c) Delegation
    d) Management
    • Ans: c
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: The Delegation tab displays groups and users with permission to link, perform modeling analyses, or read group policy results information. Modeling is the same as Planning mode using RsoP.
  5. When a GPO is selected in Group Policy Management, which tab allows administrators to view the locations to which the policy is linked?
    a) Scope
    b) Details
    c) Settings
    d) Delegation
    • Ans: a
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
    • Feedback: The Scope tab allows administrators to view the locations to which the policy is linked. In addition, security filtering using permissions and WMI also are available for viewing, editing, or creating.
  6. __________ GPOs can act as templates when creating new GPOs for your organization.
    a) Template
    b) Base
    c) Starter
    d) Set
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
    • Feedback: A new Group Policy management feature in Windows Server 2008 is the ability to create Starter GPOs that can act as templates when creating new GPOs for your organization. You can configure a common list of settings within a Starter GPO, and any GPOs that you create based on that Starter GPO will receive those settings.
  7. What setting will prevent policy settings from applying to all child objects at the current level and all subordinate levels?
    a) Block Policy Propagation
    b) Block Policy Inheritance
    c) Remove Policy Inheritance
    d) Remove Policy Propagation
    • Ans: b
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
    • Feedback: Using the Block Policy Inheritance policy setting, you can prevent policy settings from applying to all child objects at the current level and all subordinate levels. Although the Block Policy Inheritance setting is useful in some circumstances, it may be necessary to have a policy apply only when certain conditions exist or only to a certain group of people.
  8. What refines the application of a GPO to include or exclude certain users, groups, or computers based on the ACL that is applied to the GPO?
    a) Block Policy Inheritance
    b) Policy Delegation
    c) Group Based Filtering
    d) Security Group Filtering
    • Ans: d
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
    • Feedback: The Security Group Filtering method uses the GPO’s Security tab to determine user and group account access to the policy.
  9. What component of the Microsoft Windows operating system allows administrators to create queries based on hardware, software, operating systems, and services?
    a) VBScript
    b) Windows Scripting Language
    c) Windows Management Instrumentation
    d) .NET Framework
    • Ans: c
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
    • Feedback: Windows Management Instrumentation (WMI) is a component of the Microsoft Windows operating system that provides management information and control in an enterprise environment. It allows administrators to create queries based on hardware, software, operating systems, and services. These queries can be used to gather data or determine where items, such as GPOs, will be applied.
  10. 10. How many WMI filters can be configured per GPO?
    a) one
    b) two
    c) three
    d) five
    • Ans: a
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
    • Feedback: Only one WMI filter can be configured per GPO. After it is created, a WMI filter can be linked to multiple GPOs.
  11. What is the sum of the policies applied to a user or computer after all filters, security group permissions, and inheritance settings, such as Block Policy Inheritance and Enforce, have finished processing?
    a) Effective Permissions
    b) Resultant Set of Policy
    c) Effective Set of Policy
    d) Applied Policy
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: Resultant Set of Policy (RSoP) is the sum of the policies applied to a user or computer after all filters, security group permissions, and inheritance settings, such as Block Policy Inheritance and Enforce, have finished processing.
  12. Which mode in the Resultant Set of Policy Wizard is useful for documenting and understanding how combined policies are affecting users and computers?
    a) Logging
    b) Planning
    c) Implementation
    d) Auditing
    • Ans: a
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
    • Feedback: Logging mode queries existing policies in the hierarchy that are linked to sites, domains, domain controllers, and OUs. This mode is useful for documenting and understanding how combined policies are affecting users and computers. The results are returned in an MMC window that can be saved for later reference.
  13. 13. What database of information includes hardware, Group Policy Software Installation settings, Internet Explorer Maintenance settings, scripts, Folder Redirection settings, and Security settings?
    a) CICOM
    b) CIMOM
    c) DOM
    d) DCOM
    • Ans: b
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
    • Feedback: RSoP uses information that is part of the Common Information Management Object Model (CIMOM) database. The CIMOM database is used through WMI and contains information that is gathered when a computer starts and becomes part of the network. This information includes hardware, Group Policy Software Installation settings, Internet Explorer Maintenance settings, scripts, Folder Redirection settings, and Security settings.
  14. Group Policy __________ is used to simulate the effect of a policy on the user environment.
    a) Simulator
    b) Planning
    c) Modeling
    d) Results
    • Ans: c
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: Group Policy Modeling, referred to as Planning mode using the Resultant Set of Policy snap-in, is used to simulate the effect of a policy on the user environment.
  15. Rather than simulating policy effects like the Group Policy Modeling Wizard, what obtains RSoP information from the client computer to show the actual effects that policies have on the client computer and user environment?
    a) Group Policy Simulator
    b) Group Policy Planning
    c) Group Policy Modeling
    d) Group Policy Results
    • Ans: d
    • Difficulty: Medium
    • Section Ref: Managing Group PolicyFeedback: The Group Policy Results feature in Group Policy Management is equivalent to the Logging mode within the Resultant Set of Policy MMC snap-in. Rather than simulating policy effects, such as the Group Policy Modeling Wizard, Group Policy Results obtains RSoP information from the client computer to show the actual effects that policies have on the client computer and user environment.
  16. What command-line tool allows you to create and display an RSoP query from the command line?
    a) GPResult
    b) GPUpdate
    c) GPClone
    d) GPRSoP
    • Ans: a
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: Although not quite as easy to read as the Group Policy Results information that can be obtained using GPMC, GPResult is a command-line tool that allows you to create and display an RSoP query from the command line. It provides comprehensive information about the operating system, the user, and the computer.
  17. What would the syntax of the GPResult command be if you want to obtain RSoP information on computer and user policies that will affect a user named jsmith?
    a) gpresult /user jsmith
    b) gpresult jsmith
    c) gpresult /user jsmith /v
    d) gpresult /user jsmith /v /x
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Managing Group PolicyFeedback: To obtain RSoP information on computer and user policies that will affect jsmith, key the following command from a command line: gpresult /user jsmith /v.
  18. Which mode in the Resultant Set of Policy Wizard allows administrators to simulate the effect of policy settings prior to implementing them on a computer or user?
    a) Logging
    b) Planning
    c) Implementation
    d) Auditing
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: Planning mode allows administrators to simulate the effect of policy settings prior to implementing them on a computer or user. This mode is beneficial when planning due to growth or changes to your organization. You can use planning mode to test the effects of changes to group policies on your organization prior to deployment.
  19. WMI filters cannot be evaluated on which operating system?
    a) Windows XP
    b) Windows 2000
    c) Windows Server 2003
    d) Windows Vista
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
    • Feedback: WMI Filters will only be evaluated on Windows Vista, Windows XP Professional, or Windows Server 2003 computers. Windows 2000–based computers will ignore WMI filters.
  20. WMI Filtering uses filters written in what language, which is similar to structured query language (SQL)?
    a) PostGRE SQL
    b) Microsoft SQL Server
    c) WMI Query Language
    d) WIM Query Language
    • Ans: c
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
    • Feedback: The WMI Filtering method uses filters written in the WMI Query Language (WQL) to control GPO application, which is similar to structured query language (SQL).
  21. Multiple versions of the same GPO cannot be backed up to the same file system directory.
    • Ans: False
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  22. When the Settings tab is activated, an HTML report is generated that allows administrators to view GPO settings that do not have the original default values.
    • Ans: True
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  23. At least two domain controllers running Windows Server 2003 or Windows Server 2008 must be present to use WMI filters.
    • Ans: False
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  24. RSoP is available as an MMC snap-in.
    • Ans: True
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  25. The Policy Events tab collects all policy-related events and stores them in one convenient location.
    • Ans: True
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  26. Group Policy Management is located in the __________ Tools folder of the Start menu.
    • Ans: Administrative
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  27. The __________ Group Policy Objects tab allows an administrator to change the order of policies, create new policies, edit existing policies, create policy links, and view and change the enabled status.
    • Ans: Linked
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  28. By default, Group Policy settings will apply to all __________ objects within the domain, site, or OU to which they are linked.
    • Ans: child
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  29. WMI allows administrators to create __________ based on hardware, software, operating systems, and services.
    • Ans: queries
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  30. __________ Set of Policy is the sum of the policies applied to a user or computer after all filters, security group permissions, and inheritance settings, such as Block Policy Inheritance and Enforce, have finished processing.
    • Ans: Resultant
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  31. Group Policy __________, referred to as Planning mode using the Resultant Set of Policy snap-in, is used to simulate the effect of a policy on the user environment.
    • Ans: Modeling
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  32. __________ is a command-line tool that allows you to create and display an RSoP query from the command line.
    • Ans: GPResult
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  33. The Resultant Set of Policy __________ is provided in Windows Server 2008 to assist administrators in determining the effects of policies on users and computers.
    • Ans: Wizard
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  34. Security Group __________ refines the application of a GPO to include or exclude certain users, groups, or computers based on the ACL that is applied to the GPO.
    • Ans: Filtering
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  35. A new Group Policy management feature in Windows Server 2008 is the ability to create __________ GPOs that can act as templates when creating new GPOs for your organization.
    • Ans: Starter
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  36. What MMC snap-in is a tool for managing Group Policy in Windows Server 2008, Windows Server 2003, and Windows 2000 Active Directory domains?
    • Ans: Group Policy Management
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  37. What tab displays the order of precedence for the policies set on a given container?
    • Ans: Group Policy Inheritance
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  38. What type of GPO can act as templates when creating new GPOs for your organization?
    • Ans: Starter GPO
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  39. What setting can prevent policy settings from applying to all child objects at the current level and all subordinate levels?
    • Ans: Block Policy Inheritance
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  40. What can be used to control which users or computers will be affected by a GPO based on defined criteria?
    • Ans: WMI filters
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
  41. What is the sum of the policies applied to a user or computer after all filters, security group permissions, and inheritance settings, such as Block Policy Inheritance and Enforce, have finished processing?
    • Ans: Resultant Set of Policy
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
  42. What RSoP mode allows administrators to simulate the effect of policy settings prior to implementing them on a computer or user?
    • Ans: Planning mode
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
  43. What feature in Group Policy Management is equivalent to the Logging mode within the Resultant Set of Policy MMC snap-in?
    • Ans: Group Policy Results
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  44. What is the Group Policy Management MMC snap-in?
    • Ans: The Group Policy Management MMC snap-in is a tool for managing Windows Server 2008, Windows Server 2003, and Windows 2000 Active Directory domains. The Group Policy Management MMC provides a single access point to all aspects of Group Policy that were previously spread across other tools such as Active Directory Users and Computers, Active Directory Sites and Services, Resultant Set of Policy (RSoP), and the Group Policy Management Editor.
    • Difficulty: Easy
    • Section Ref: Managing Group Policy
  45. What is the purpose of a Starter GPO?
    • Ans: You can configure a common list of settings within a Starter GPO, and any GPOs that you create based on that Starter GPO will receive those settings.
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  46. What two options exist to prevent restrictive policies from applying to administrators or other accounts for which they are not intended?
    • Ans: Remove the ACE entry for the Authenticated Users group that grants Read and Apply Group Policy permissions, and grant these two permissions to only the groups that you want the GPO to affect. Also, set the Apply Group Policy ACE to Deny for the specific group or groups that you want to exclude from the Group Policy. The GPO will still apply to all other users because of the Authenticated Users ACE.
    • Difficulty: Hard
    • Section Ref: Managing Group Policy
  47. What is the Windows Management Instrumentation?
    • Ans: Windows Management Instrumentation (WMI) is a component of the Microsoft Windows operating system that provides management information and control in an enterprise environment. It allows administrators to create queries based on hardware, software, operating systems, and services.
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  48. To help alleviate the possibly daunting task of determining where policy settings came from and the results of all cumulative policies, what three tools does Microsoft provide?
    • Ans: Resultant Set of Policy Wizard, Group Policy Results and Group Policy Modeling components of Group Policy Management, and GPResult command-line tool
    • Difficulty: Medium
    • Section Ref: Managing Group Policy
  49. What are the two RSoP modes?
    • Ans: Planning mode and Logging modeDifficulty: Easy
    • Section Ref: Managing Group Policy
  50. What is the GPResult tool?
    • Ans: GPResult is a command-line tool that allows you to create and display an RSoP query from the command line. It provides comprehensive information about the operating system, the user, and the computer.
    • Difficulty: Easy
    • Section Ref: Managing Group Policy

What would you like to do?

Home > Flashcards > Print Preview