MCSE Windows Server Administration & Group Policy 2 — Questions and Answers
Question 1: Which PowerShell cmdlet is used to add a Windows Server to an existing Active Directory domain?
- Install-ADDSDomainController
- Add-Computer (Correct answer)
- Join-Domain
- Install-ADDSDomain
Correct answer: Add-Computer
The Add-Computer cmdlet joins a Windows computer to a domain or workgroup and can optionally restart the computer after joining.
Question 2: An administrator wants to prevent a specific security group from having a GPO applied to them while the GPO still applies to all other users in the OU. What is the correct approach?
- Block Inheritance on the OU
- Remove 'Apply Group Policy' permission for the security group on the GPO (Correct answer)
- Set the GPO to Enforced
- Delete the GPO link from the OU
Correct answer: Remove 'Apply Group Policy' permission for the security group on the GPO
Removing the 'Apply Group Policy' (Apply) ACE for a specific security group on the GPO prevents the GPO from applying to members of that group while it continues to apply to others.
Question 3: What does the 'Read-Only Domain Controller' (RODC) feature prevent in branch office deployments?
- Replication of all AD changes to the hub site
- Write-back of user credentials and AD changes to the writable DC (Correct answer)
- DNS resolution for branch clients
- Kerberos ticket issuance for branch users
Correct answer: Write-back of user credentials and AD changes to the writable DC
An RODC holds a read-only copy of AD and does not allow write-back; if compromised, no changes can be pushed back to writable DCs, protecting the central directory.
Question 4: Which Windows Server storage feature allows multiple physical disks to be pooled and then provisioned as virtual disks with thin or fixed provisioning?
- Dynamic Disks
- Storage Spaces (Correct answer)
- Distributed File System (DFS)
- iSCSI Target Server
Correct answer: Storage Spaces
Storage Spaces allows administrators to group physical disks into storage pools and create virtual disks (storage spaces) with configurable resiliency and provisioning types.
Question 5: An administrator needs to configure folder redirection for the Documents folder of all domain users. Which node in Group Policy Management Editor should be used?
- Computer Configuration > Windows Settings > Folder Redirection
- User Configuration > Windows Settings > Folder Redirection (Correct answer)
- Computer Configuration > Administrative Templates > System > Folder Redirection
- User Configuration > Preferences > Windows Settings > Folders
Correct answer: User Configuration > Windows Settings > Folder Redirection
Folder Redirection is a User Configuration setting located under User Configuration > Windows Settings > Folder Redirection in the Group Policy Management Editor.
Question 6: What is the purpose of the 'Flexible Single Master Operations' (FSMO) role called 'RID Master'?
- Controls schema modifications across the forest
- Allocates pools of relative identifiers to each DC to ensure unique SID creation (Correct answer)
- Maintains time synchronization across the domain
- Manages cross-domain authentication
Correct answer: Allocates pools of relative identifiers to each DC to ensure unique SID creation
The RID Master allocates sequences of Relative Identifiers (RIDs) to DCs in the domain; each DC uses these to build unique Security Identifiers (SIDs) for new objects.
Question 7: Which Group Policy setting type is used to manage preferences for applications and settings that cannot be enforced, such as setting a drive mapping that users can change?
- Administrative Templates
- Group Policy Preferences (Correct answer)
- Software Installation
- Security Settings
Correct answer: Group Policy Preferences
Group Policy Preferences allow administrators to configure and deploy settings that users can override, unlike enforced Administrative Template policies which users cannot change.
MCSE Windows Server Administration & Group Policy 2
Which PowerShell cmdlet is used to add a Windows Server to an existing Active Directory domain?