Chapter 10-11

You want to use IPsec to protect communications between a server and computers on a specific subnet of your network. Which type of connection security rule can you create to do this? (Choose all that apply.)

Which of the following cannot be used as a targeting item for preference item-level targeting?

1. Diffie–Hellman Group 14 is an example of what?

When creating connection security rules, which authentication option would you typically use in an environment that includes computers unable to use the IPsec authentication methods available with Windows Firewall with Advanced Security?

. You have created a flat OU structure for your domain that has only top-level OUs and no child OUs. Each department’s desktops, laptops, and users are contained in different OUs. What is the main reason why this design is a poor choice when it comes to implementing Group Policy for your environment?

What action does the following command perform?
Backup-GPO –All –Path \\HOST6\GpoBackups

. Which of the following cannot be used as a targeting item for preference item-level targeting?

You have configured several Drive Maps preference items so that users targeted by the GPO can have mapped drives to make it easier for them to access shared folders on the network. These shared folders are all located on different file servers. Occasionally, one of the file servers is taken down for maintenance, and you want the user to be able to use the remaining mapped drives when this occurs. Which option on the Common tab of the Drive Maps preference item can you configure to allow this?

Which two cmdlets can you use together to create a new GPO and link it using a single command?

3. What node should you select in the console tree of the GPMC to view the current status of SYSVOL replication as it relates to Group Policy in a domain?

You want to create a firewall rule that blocks inbound traffic to %windir%regedit.exe on the computer. Which type of rule can you use to do this? (Choose all that apply.)

1. Which of the following is not true concerning Group Policy preferences? (Choose all that apply.)

Which of the following statements is not true regarding firewall profiles in Windows Firewall with Advanced Security? (Choose all that apply.)

You have two firewall rules configured on the computer as follows:
Rule A explicitly blocks outbound traffic from the svchost.exe process running on the computer.
Rule B explicitly allows outbound traffic from the svchost.exe process running on the computer.
In addition, the outbound default rule is set to Block.
The svchost.exe process running on the computer attempts to send a packet to another computer on the network. Which answer best describes what will happen?

You right-clicked an OU in the GPMC console tree that contains computers and then selected the Group Policy Update menu option from the context menu. The Remote Group Policy Update Results dialog box indicates Completed, and no error message has been displayed. You later discover that at least one of the Computer Configuration policies in the GPO linked to the OU was not refreshed on the computers in the OU. What could be the cause of this failure? (Choose all that apply.)