Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
26 Cards in this Set
- Front
- Back
|
In Which order to GPO's process? |
GPOs will process in the following order: -Local GPOs -GPOs linked to sites -GPOs linked to domains -GPOs linked to OUs |
|
|
What happens when a GPO is enforced? |
When a GPO uses the Enforced setting, meaning it is Enabled, any setting in the policy those conflicts with a child policy will be overwritten by the enforced policy. However, this does not change the order in which the policies apply. It simply prevents the enforced setting from being overwritten when the child policy is applied. |
|
|
True or False?
The Local Group Policy Editor provides the option to filter Administrative Template policy setting. |
True |
|
|
What kind of GPO Administrative Templates leave behind Registry changes when removed? |
Unmanaged. Managed would remove the registry changes when the policy is removed. |
|
|
Which powershell cmdlet should you use to grand GPO permissions to one user? |
You should use the Set-GPPermission PowerShell cmdlet. It grants a level of permissions to a security principal for one GPO or all the GPOs in a domain. |
|
|
Which powershell cmdlet should you use to list all policies that apply to one user/computer account? |
Gpresult generates a listing of the policies that currently affect either a user or a computer account |
|
|
Which cmdlet forces an update of a policy outside of regularly scheduled updates? |
Gpupdate |
|
|
Which powershell cmdlet restores the default GPOs, Default Domain Controllers GPO and the Default Domain GPO? |
Dcgpofix |
|
|
Which PowerShell cmdlet returns information about Group Policy inheritance for a specified domain or OU? |
Set-GPInheritance |
|
|
Which PowerShell cmdlet generates a report in either XML or HTML format that describes properties and policy settings for a specified GPO or for all GPOs in a domain. The information that is reported for each GPO includes: details, links, security filtering, WMI filtering, delegation, and computer and user configurations. |
Get-GPOReport |
|
|
Which PowerShell cmdlet imports the Group Policy settings from a backed-up GPO into a specified GPO? |
Import-GPO |
|
|
What network speed is considered a Slow Link in Group policy by default? |
When a client computer applies a Group Policy and detects that the available bandwidth between it and the domain controller is less than 500 Kbps, it will only download and apply those settings with the GPO that are considered mandatory |
|
|
When a slow link is detected, which policies are not downloaded/applied? |
-Disk Quota -Software Installation -Scripts -Folder Redirection -Wireless Network (IEEE 802.11) Policies -Wired Network (IEEE 802.3) Policies -Internet Explorer -Maintenance Extension |
|
|
Where do you change the default "slow link" speed? |
You can define what is considered a slow link by setting the Group Policy slow link detection policy under the Computer Configuration\Policies\Administrative Templates\system\Group Policy folder. |
|
|
Which types of files can be used in the Central Store? |
Only ADMX and ADML files can be stored in the Central Store. |
|
|
Which tool is used to convert an .ADM file to .ADMX? |
Fullarmor ADMX Migrator. |
|
|
How do you move the settings from one GPO to another GPO in a different Domain? |
-Back up the frist GPO using GPMC. -Create a GPO in target domain named the same as the source. -Use GPMC Import the backup and target the new GPO. Migration tables can be used if the GPO refers to domain specific objects or security principles. |
|
|
Which command opens the Group Policy Editor Console? |
gpedit.msc |
|
|
When using the migration table editor, which sources can be used for a source name? |
-UPN. For example, "someone@verigon.com". -SAM. For example, "verigon\someone". -DNS. For example, "verigon.com\someone". -Free text -SID |
|
|
When Direct Access is configured with the Default settings, what kind of computers does the GPO target? |
By default, the WMI filtering only targets laptops. Direct access will support windows 7 and above. |
|
|
Which symbol is used to mark a GPO as Enforced? |
A golden Padlock. |
|
|
Which Group Policy settings can be disabled by slow link detection? |
Security settings and settings through administrative templates cannot be turned off. This means they must be processed, even over a slow link. |
|
|
You have a script that uses Invoke-GPUpdate cmdlet to perform a remote Group Policy refresh for all domain joined computers.Which firewall rules should you set on each computer in the domain? |
-Remote Scheduled Tasks Management (RPC) -Remote Scheduled Tasks Management (RPC-EPMAP) -Windows Management Instrumentation (WMI-in) |
|
|
What is the function of Item level targeting? |
Item level targeting is used to replace WMI filters for basic tasks. |
|
|
Which policy should you use to ensure that all startup scripts are run at the same time? |
The Run startup scripts asynchronously policy. |
|
|
Which policy should you use to ensure that explorer doesn't start before all startup scripts have finished? |
The Run logon scripts synchronously policy. |
