SA 3.5

Which tool is primarily used to manage Group Policy Objects (GPOs)?

• Group Policy Management Console (GPMC)

• Group Policy Management Editor (GPME)

• PowerShell

• Active Directory Users and Computers

Answer explanation

Slides Locations: Slide 5, 6

Answer: Group Policy Management Editor (GPME)

Explanations:

The Group Policy Management Editor (GPME) is used to edit the settings within a GPO, whereas the Group Policy Management Console (GPMC) is used to manage and link GPOs.

Scenario: Your company needs to apply a new security setting across all computers in the domain. Where should you link the GPO to ensure it affects all computers?

• At the Site level

• At the Organizational Unit (OU) level

• At the Domain level

• At the Local level

Answer explanation

Slides Locations: Slide 10, 11

Answer: At the Domain level

Explanations:

Linking a GPO at the Domain level ensures that it applies to all objects within the domain, including all computers.

What is the default order of GPO processing?

• Site -> Domain -> OU -> Local

• Local -> Domain -> Site -> OU

• Domain -> Local -> Site -> OU

• OU -> Site -> Local -> Domain

Answer explanation

Slides Locations: Slide 14, 15

Answer: Site -> Domain -> OU -> Local

Explanations:

The default processing order for GPOs is Site, Domain, OU, and then Local, which ensures higher-level settings can be overridden by more specific settings.

Scenario: A user reports that their desktop background is not changing as per the new GPO settings. What could be the most likely cause?

• The GPO is not linked correctly

• The user does not have read permissions for the GPO

• The GPO is disabled

• The user has not logged off and on since the GPO was applied

Answer explanation

Slides Locations: Slide 11, 12

Answer: The user has not logged off and on since the GPO was applied

Explanations:

User configuration settings in GPOs are applied during user logon, so the user needs to log off and log back on for the changes to take effect.

Which command can be used to manually refresh Group Policy settings?

• gpupdate

• gpmc

• gpoedit

• refreshgp

Answer explanation

Slides Locations: Slide 11

Answer: gpupdate

Explanations:

The gpupdate command is used to manually refresh Group Policy settings on a local machine.

Scenario: You need to apply a specific GPO only to computers running Windows 10 in the Marketing OU. What filtering method should you use?

• Security group filtering

• WMI filtering

• OU filtering

• Domain filtering

Answer explanation

Slides Locations: Slide 18, 19

Answer: WMI filtering

Explanations:

WMI filtering allows GPOs to be applied based on attributes of the target computer, such as the operating system version.

What attribute of an OU can be set to block the processing of inherited GPOs from above in the Active Directory hierarchy?

• Block Inheritance

• Enforced

• Disabled

• No Override

Answer explanation

Slides Locations: Slide 15

Answer: Block Inheritance

Explanations:

Block Inheritance is an attribute of an OU that can be set to prevent inherited GPOs from higher levels in the Active Directory hierarchy from being applied.

Scenario: A user in the Sales OU is not receiving the settings from a GPO linked to the Sales OU. Which of the following could be a cause?

• The GPO is enforced

• The user does not have read permissions on the GPO

• The GPO is linked to another OU

• The GPO is applied at the domain level

Answer explanation

Slides Locations: Slide 12, 19

Answer: The user does not have read permissions on the GPO

Explanations:

If the user does not have read permissions on the GPO, they will not receive the settings from that GPO.

Which of the following is a benefit of using Group Policy?

• Decentralizes the administration of security settings

• Centralizes the administration of security settings

• Increases the complexity of network management

• Reduces the number of policies that can be applied

Answer explanation

Slides Locations: Slide 5

Answer: Centralizes the administration of security settings

Explanations:

Group Policy centralizes the administration of security settings, making it easier to manage and enforce policies across multiple users and computers.

Scenario: You need to deploy an application to all users in a specific OU. Which GPO option should you use?

• Assign

• Publish

• Enforce

• Link

Answer explanation

Slides Locations: Slide 29

Answer: Assign

Explanations:

The Assign option is used to deploy applications required by users and computers, making the application available to all users in the specified OU.