Information Technology Reference
In-Depth Information
want to do is make them Domain Admins, which would give them the permissions they
need, but would have all sorts of security implications in other areas of the company.
2.
You need to set a regular GPO backup for the Engineering OU GPOs. (Actually, you
should be doing this for the entire domain.) Use the Backup-GPO cmdlet as part of
a regularly scheduled task and use a Group Managed Service Account to run the
task. (See Chapter 5, “Configure and manage Active Directory,” for details on Group
Managed Service Accounts.) Make sure that the GPOs are backed up to a location
that is available only to Domain Admins. If you need to recover a GPO to its previous
state, you can use the Restore-GPO cmdlet, or use the GPMC and restore by selecting
Manage Backups from the context menu of the Group Policy Objects container.
Objective 6.3: review
Correct answer:
C
1.
Incorrect:
You can't use Windows PowerShell to restore the default GPOs.
A.
Incorrect:
You can't use Windows PowerShell to restore the default GPOs.
B.
Correct:
This command restores the Default Domain Policy, even if the schema
doesn't match.
C.
Incorrect:
This command restores the Default Domain Controller Policy, but does
not restore the Default Domain Policy.
D.
Correct answer:
D
2.
Incorrect:
The Restore-GPO command requires a path to the GPO to be restored.
A.
Incorrect:
This restores all GPOs in the domain.
B.
Incorrect:
This imports the GPO to a new GPO, but leaves the original GPO intact.
C.
Correct:
This is the correct command line to restore the most recent backup
version of the GPO.
D.
Correct answer:
D
3.
Incorrect:
You can't restore a backup across domain boundaries; you need to
import the backup.
A.
Incorrect:
This restores the backup to the original domain.
B.
Incorrect:
This copies everything, not just the settings, and does not bring the
settings into the correct GPO, even with a Migration Table.
C.
Correct:
This is the correct procedure for importing just the settings from the
backup of the source GPO to the target GPO.
D.
