Administering Windows Server 2012 Group Policy Management & Configuration 1 — Questions and Answers
Question 1: Which tool is used to create and manage Group Policy Objects (GPOs) in Windows Server 2012?
- Active Directory Users and Computers
- Group Policy Management Console (GPMC) (Correct answer)
- Local Security Policy Editor
- Server Manager
Correct answer: Group Policy Management Console (GPMC)
The Group Policy Management Console (GPMC) is the primary tool for creating, linking, and managing GPOs across an Active Directory domain.
Question 2: What is the default order in which Group Policy is applied (from first to last)?
- Site, Domain, OU, Local
- Local, Site, Domain, OU (Correct answer)
- Domain, Site, OU, Local
- OU, Domain, Site, Local
Correct answer: Local, Site, Domain, OU
Group Policy is applied in LSDOU order: Local, Site, Domain, then Organizational Unit, with each successive layer able to override the previous.
Question 3: An administrator wants a GPO setting to take effect immediately without waiting for the standard refresh interval. Which command should be run?
- gpresult /force
- gpupdate /force (Correct answer)
- gpedit /refresh
- secedit /refreshpolicy
Correct answer: gpupdate /force
The gpupdate /force command forces an immediate refresh of all Group Policy settings on the local computer, bypassing the normal refresh interval.
Question 4: Which Group Policy feature allows an administrator to configure settings only for specific users based on their security group membership?
- WMI Filtering
- Security Filtering (Correct answer)
- Block Inheritance
- Loopback Processing
Correct answer: Security Filtering
Security Filtering allows administrators to specify which users or computers within a GPO's scope will actually have the GPO applied to them based on security group membership.
Question 5: What is the default Group Policy refresh interval for domain computers in Windows Server 2012?
- 15 minutes
- 30 minutes
- 90 minutes (Correct answer)
- 120 minutes
Correct answer: 90 minutes
The default Group Policy refresh interval for domain member computers is 90 minutes, with a random offset of 0-30 minutes to prevent network flooding.
Question 6: Which utility generates an HTML report showing the Resultant Set of Policy (RSoP) for a specific user and computer?
- gpresult /H (Correct answer)
- gpupdate /report
- rsop.msc /html
- secedit /analyze
Correct answer: gpresult /H
The gpresult /H command generates an HTML RSoP report that shows which GPO settings are applied to a specific user or computer.
Question 7: An OU has Block Inheritance enabled. Which GPO setting can override this and force the GPO to still apply?
- Loopback Processing
- Enforced (No Override) (Correct answer)
- Security Filtering
- WMI Filtering
Correct answer: Enforced (No Override)
Setting a GPO to 'Enforced' (previously called 'No Override') forces the policy to apply even if the target OU has Block Inheritance configured.
Administering Windows Server 2012 Group Policy Management & Configuration 1
Which tool is used to create and manage Group Policy Objects (GPOs) in Windows Server 2012?