Windows Server Administration & Group Policy Flashcards
7 cards from real MCSE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Windows Server Administration & Group Policy flashcards as text
Which PowerShell cmdlet is used to add a Windows Server to an existing Active Directory domain?
Answer: Add-Computer
The Add-Computer cmdlet joins a Windows computer to a domain or workgroup and can optionally restart the computer after joining.
An administrator wants to prevent a specific security group from having a GPO applied to them while the GPO still applies to all other users in the OU. What is the correct approach?
Answer: Remove 'Apply Group Policy' permission for the security group on the GPO
Removing the 'Apply Group Policy' (Apply) ACE for a specific security group on the GPO prevents the GPO from applying to members of that group while it continues to apply to others.
What does the 'Read-Only Domain Controller' (RODC) feature prevent in branch office deployments?
Answer: Write-back of user credentials and AD changes to the writable DC
An RODC holds a read-only copy of AD and does not allow write-back; if compromised, no changes can be pushed back to writable DCs, protecting the central directory.
Which Windows Server storage feature allows multiple physical disks to be pooled and then provisioned as virtual disks with thin or fixed provisioning?
Answer: Storage Spaces
Storage Spaces allows administrators to group physical disks into storage pools and create virtual disks (storage spaces) with configurable resiliency and provisioning types.
An administrator needs to configure folder redirection for the Documents folder of all domain users. Which node in Group Policy Management Editor should be used?
Answer: User Configuration > Windows Settings > Folder Redirection
Folder Redirection is a User Configuration setting located under User Configuration > Windows Settings > Folder Redirection in the Group Policy Management Editor.
What is the purpose of the 'Flexible Single Master Operations' (FSMO) role called 'RID Master'?
Answer: Allocates pools of relative identifiers to each DC to ensure unique SID creation
The RID Master allocates sequences of Relative Identifiers (RIDs) to DCs in the domain; each DC uses these to build unique Security Identifiers (SIDs) for new objects.
Which Group Policy setting type is used to manage preferences for applications and settings that cannot be enforced, such as setting a drive mapping that users can change?
Answer: Group Policy Preferences
Group Policy Preferences allow administrators to configure and deploy settings that users can override, unlike enforced Administrative Template policies which users cannot change.