70-411 Test Bank, Lesson 21 Managing Group Policy Objects

5 Multiple Choice
3 Short Answer
1 Best Answer
4 Build List
4 Repeated Answer
17 questions

Multiple Choice
1. Which domain users are automatically granted permissions to perform Group
Policy Management tasks?
a. local administrators
b. power users
c. domain administrators
d. domain users
Answer: c
Difficulty: Easy
Section Ref: Delegating Group Policy Management
Explanation: In Active Directory, domain administrators are automatically granted
permissions for performing Group Policy Management tasks.
2. Why would you ever want or need to reset the domain policy and the domain
controller policy to the default settings? Select all that apply.
a. if theyve become corrupted
b. to refresh policy settings
c. as a regular part of domain maintenance and housekeeping
d. if someone deleted one of the policies
Answer: a and d
Difficulty: Medium
Section Ref: Resetting the Default GPOs
Explanation: When you create a new domain, you start with the Default Domain
Policy and Default Domain Controller Policy. If either of these gets deleted,
corrupted, or you just want to start over, you can use the DCGPOFix.exe command.

3. A user must have which two existing permissions for new permissions to be
applied to their accounts for GPO delegation?
a. Allow Read
b. Allow Write
c. Allow Apply
d. Allow Modify
Answer: a and c
Difficulty: Medium
Section Ref: Delegating Group Policy Management
Explanation: For permissions to be applied to users, they must have the Allow Read
and Allow Apply group policy permissions.
4. If you dont want a GPO to apply, which group policy permission do you apply to a
user or group?
a. Disallow Read
b. Disallow Write
c. Disallow Modify
d. Disallow Apply
Answer: d
Difficulty: Medium
Section Ref: Delegating Group Policy Management
Explanation: If you dont want a GPO to apply, you can assign the Disallow Apply
group policy permission to a user or group.
5. When youre about to reset domain policy and domain controllers policy back to
default with the dcgpofix.exe command, what final warning are you given before
you accept the change?
a. that youre about to reset policies to their defaults
b. that all User Rights Assignments will be replaced
c. that all security for the domain will be overwritten
d. that youre about to restore all security to the default
Answer: b
Difficulty: Medium
Section Ref: Resetting the Default GPOs
Explanation: The dcgpofix.exe command says that it will replace all User Rights
Assignments.

Short Answer
6. What does the dcgpofix.exe command do?

Answer: It can restore the Default Domain Policy or the Default Domain Controllers
Policy or both to their default settings.
Difficulty: Medium
Section Ref: Resetting the Default GPOs
Explanation: The dcgpofix.exe command can restore either or both the Default
Domain Policy or the Default Domain Controllers Policy to their default settings.
7. What role must a user have to use the dcgpofix.exe command?
Answer: You must be a domain administrator to use dcgpofix.exe.
Difficulty: Medium
Section Ref: Resetting the Default GPOs
Explanation: The dcgpofix.exe command can restore either or both the Default
Domain Policy or the Default Domain Controllers Policy to their default settings. Of
course, you must be a domain administrator to perform this task.
8. Which utility do you use to delegate GPO permissions to other users?
Answer: To grant GPO permissions to other users, you use the Group Policy
Management Console.
Difficulty: Medium
Section Ref: Delegating Group Policy Management
Explanation: To delegate GPO permissions, you use the Group Policy Management
Console.

Best Answer
9. To give someone permission to manage a particular GPO, you use the __________
tab of the individual GPO.
a. Permissions
b. Security
c. Delegate
d. Settings
Answer: c
Difficulty: Medium
Section Ref: Delegating Group Policy Management
Explanation: To give someone permission to manage a particular GPO, you use the
Delegate tab of the individual GPO.

Build List
10. Order the following steps required to specify who can create GPOs.

a. Click the Delegation tab.

b. Open the Group Policy Management console.
c. Navigate to and click the Group Policy Objects container.
d. Add a User, Group, or Computer.
Answer: B C A D
Difficulty: Easy
Section Ref: Delegating Group Policy Management
Explanation: Refer to the steps outlined in Specify Who Can Create GPOs.
11. Order the following steps required to use a migration table.
a. Save the file.
b. On the Migrating References page, click Using this migration table to map them
in the destination GPO option.
c. Select the GPO for Migration Table population.
d. Navigate to and click the Group Policy Objects container.
e. Enter the Destination Name.
f. Select Populate from Backup or Populate from GPO.
g. Select the GPO you want to import.
h. Create a new migration table.
i. Open the Group Policy Management console.
j. Specify the location of backups.
k. Import a GPO.
Answer: I D K J G B H F C E A
Difficulty: Medium
Section Ref: Using a Migration Table
Explanation: Refer to the steps outlined in the Use a Migration Table section.
12. Order the following steps required to import GPO settings.
a. Select the source GPO.
b. Select Copying them identically from the source.
c. Right-click the target GPO and click Import Settings.
d. Back up the GPO prior to import.
e. Navigate to and click the Group Policy Objects container.
f. Open the Group Policy Management console.
Answer: F E C D A B
Difficulty: Medium
Section Ref: Backing Up and Restoring GPOs
Explanation: Refer to the steps as outlined in Import GPO Settings.
13. Order the following steps required to back up a GPO.

a. In the Location text box, specify where you want to store the backups and click
Back Up.
b. Open the Group Policy Management console.
c. Navigate to and click the Group Policy Objects container.
d. To back up all GPOs, right-click the Group Policy Objects container and click Back
Up All.
Answer: B C D A
Difficulty: Easy
Section Ref: Backing Up and Restoring GPOs
Explanation: Refer to the steps outlined in Back Up GPOs.

Repeated Answer
14. What is a collection of files stored in the SYSVOL (%SystemRoot
%\SYSVOL\<Domain>\Policies\<GPOGUID>) of each domain controller?
a. Group Policy Container (GPC)
b. Group Policy Template (GPT)
c. migration table
d. delegation
Answer: b
Difficulty: Medium
Section Ref: Managing Group Policy Objects
Explanation: The GPT is a collection of files stored in the SYSVOL (%SystemRoot
%\SYSVOL\<Domain>\Policies\<GPOGUID>) of each domain controller.
15. What is a file that maps references to users, groups, computers, and UNC paths
in the source GPO to new values in the destination GPO?
a. Group Policy Container (GPC)
b. Group Policy Template (GPT)
c. migration table
d. delegation
Answer: c
Difficulty: Medium
Section Ref: Using a Migration Table
Explanation: A migration table is a file that maps references to users, groups,
computers, and UNC paths in the source GPO to new values in the destination GPO.
16. What is an Active Directory object stored in the Group Policy Objects container
with the domain naming content of the directory that defines basic attributes of the
GPO but does not contain any of the settings?
a. Group Policy Container (GPC)

b. Group Policy Template (GPT)

c. migration table
d. delegation
Answer: a
Difficulty: Medium
Section Ref: Managing Group Policy Objects
Explanation: The GPC is an Active Directory object stored in the Group Policy
Objects container with the domain naming content of the directory. It defines basic
attributes of the GPO but does not contain any of the settings.
17. What process grants permissions to other users to manage group policies?
a. Group Policy Container (GPC)
b. Group Policy Template (GPT)
c. migration table
d. delegation
Answer: d
Difficulty: Medium
Section Ref: Delegating Group Policy Management
Explanation: In Active Directory, domain administrators are automatically granted
permissions for performing Group Policy Management tasks. If you need to give
other users permissions to manage group policies, you grant those permissions
through delegation.