Information Technology Reference
In-Depth Information
Objective 6.2: review
Correct answers:
A, C, E, G
1.
Correct:
You need to create a policy for the HR software distribution or use an
existing HR-specific GPO.
A.
Incorrect:
The software is to go only to the HR department, not company-wide.
B.
Correct:
You need a software distribution point, and users in HR need Read
privileges on that distribution point.
C.
Incorrect:
Choose Publish for software packages that are optional.
D.
Correct:
Choose Assign for mandatory software packages.
E.
Incorrect:
Always use a UNC as the package location. The package location is
from the perspective of the client, not the server.
F.
Correct:
Always use a UNC as the package location. The package location is from
the perspective of the client, not the server.
G.
Correct answer:
D
2.
Incorrect:
Set-GPPermission doesn't limit the GPO to the HR users.
A.
Incorrect:
This would link the GPO to the Domain level, not the OU level.
B.
Incorrect:
Property filters limit the view of settings, but don't block their use.
C.
Correct:
You can use security filters to limit the policy to only those users who are
part of a security group.
D.
Correct answer:
C
3.
Incorrect
. The problem is consistent versions of the templates (and computers
read Group Policy when they start up, anyway).
A.
Incorrect:
The problem is consistent versions of the templates (and user policies
are updated at logon, regardless).
B.
Correct:
By configuring a central store, all users of GPMC and GPEdit automatically
read that store on SYSVOL.
C.
Incorrect:
There is no special value to a share of policies, regardless of which
computer on which it is located.
D.
Objective 6.3: thought experiment
1.
In the GPMC, configure the Engineering OU to block inheritance, which enables
Engineering to maintain its own policies, while you can still set any critical policies to
Enforced so that they are propagated to Engineering. Next, create a new GPO for Engi-
neering and link it to the OU. Then delegate permissions on that GPO to the Engineer-
ing Support security group and give them Edit Settings permissions. What you don't
