Information Technology Reference
In-Depth Information
What commands or tools would you use to set a default lockout setting?
1.
From an elevated prompt on the PDC Emulator, type
GPEdit.msc
.
A.
From an elevated prompt on the client computer, type
GPEdit.msc
.
B.
From an elevated Windows PowerShell prompt, run
Set-ADDefaultDomainPasswordPolicy.
C.
From an elevated Windows PowerShell prompt, run Set-ADAccountExpiration.
D.
Some users are reporting that they can't log on to the domain. You suspect a Kerberos
issue. What settings can you change to temporarily alleviate the problem?
A.
Set the Default Domain Policy for Maximum Tolerance For Computer Clock
Synchronization to 10.
B.
Set the Default Domain Policy for Maximum Tolerance For Computer Clock
Synchronization to 0.
C.
Change the Enforce User Logon Restrictions policy to Disabled.
D.
Change the Computer Configuration\Policies\Windows Settings\Security Settings\
Account Policies\Account Lockout Policy\Lockout Threshold to 0.
2.
3.
Remote sales users complain that they frequently need to run with a local account on
their laptops, but they are still subject to the Domain Password Policy that requires
them to change their password every 40 days. Upon consultation with management,
there is agreement that a 70-day policy for salespeople is appropriate. How would you
implement this new policy? (Choose all that apply.)
A.
Create a Sales OU and then use the Set-ADAccountExpiration cmdlet.
B.
Create a Sales OU and then use the Set-ADFineGrainedPasswordPolicy cmdlet
C.
Create a Sales security group and then use the Set-ADFineGrainedPasswordPolicy
cmdlet.
D.
Create a Sales security group and then use the New-ADFineGrainedPasswordPolicy
and Add-ADFineGraintPasswordPolicySubject cmdlets.
