MCTS 70-640 Group Policy Administration & Security Settings 2 — Questions and Answers
Question 1: What is WMI filtering in Group Policy used for?
- Restricting who can edit a GPO
- Applying a GPO only to computers or users that meet specific WMI query criteria (Correct answer)
- Filtering DNS queries through a GPO
- Controlling replication of GPOs between sites
Correct answer: Applying a GPO only to computers or users that meet specific WMI query criteria
WMI filters evaluate a WMI query against a target machine, and the GPO only applies if the query returns true, enabling hardware- or OS-based targeting.
Question 2: In which SYSVOL subfolder are GPO templates stored on a domain controller?
- SYSVOL\domain\Policies (Correct answer)
- SYSVOL\domain\Scripts
- SYSVOL\domain\Users
- SYSVOL\domain\GPTemplates
Correct answer: SYSVOL\domain\Policies
Each GPO's template files (ADM/ADMX files and settings) are stored in SYSVOL\domain\Policies\{GPO-GUID}\ on every domain controller.
Question 3: What does the Group Policy 'Loopback Processing' setting (Replace mode) do?
- Applies the computer's user-targeted GPOs instead of the user's GPOs (Correct answer)
- Merges computer GPOs with user GPOs
- Disables all user GPOs
- Forces policies to reapply even if unchanged
Correct answer: Applies the computer's user-targeted GPOs instead of the user's GPOs
In Replace mode, Loopback Processing discards the user's normal GPO set and applies only the user settings from GPOs linked to the computer's OU.
Question 4: Which Group Policy preference item type allows you to map network drives per user?
- Drive Maps under User Configuration → Preferences → Windows Settings (Correct answer)
- Scripts under Computer Configuration → Windows Settings
- Folder Redirection under User Configuration → Windows Settings
- Registry under Computer Configuration → Preferences
Correct answer: Drive Maps under User Configuration → Preferences → Windows Settings
Drive Maps in User Configuration → Preferences → Windows Settings lets you create, update, replace, or delete mapped drives for targeted users.
Question 5: What is the purpose of 'Security Filtering' on a GPO link?
- To encrypt GPO contents
- To restrict which users or computers a GPO applies to within the linked container (Correct answer)
- To block external GPO imports
- To scan GPO settings for security vulnerabilities
Correct answer: To restrict which users or computers a GPO applies to within the linked container
Security Filtering controls which security principals (users, groups, computers) within the linked OU actually receive the GPO's settings.
Question 6: Which GPO node contains settings for software restriction policies and AppLocker in Windows Server 2008?
- Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies (Correct answer)
- User Configuration → Administrative Templates → Programs
- Computer Configuration → Administrative Templates → System → Software
- User Configuration → Windows Settings → Scripts
Correct answer: Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies
Software Restriction Policies are configured under Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies.
MCTS 70-640 Group Policy Administration & Security Settings 2
What is WMI filtering in Group Policy used for?