MCTS 70-640 Group Policy Administration & Security Settings

Question 1

In what order are Group Policy Objects (GPOs) applied in Active Directory?

Accepted Answer

Local, Site, Domain, OU

Answer

Site, Domain, OU (local applied last)

Answer

OU, Domain, Site, Local

Answer

Domain, Site, OU, Local

Question 2

What does the 'Block Inheritance' option on an OU do?

Accepted Answer

Prevents GPOs from a parent container from applying to the OU

Answer

Blocks all security settings from being applied

Answer

Prevents child OUs from inheriting GPOs from the blocked OU

Answer

Disables all GPOs in the domain

Question 3

Which GPO setting overrides 'Block Inheritance' to force a policy to apply regardless?

Accepted Answer

No Override (Enforced)

Answer

Loopback Processing

Answer

WMI Filtering

Answer

Security Filtering

Question 4

Which Group Policy section contains settings like Account Lockout Policy and Password Policy?

Accepted Answer

Computer Configuration → Windows Settings → Security Settings → Account Policies

Answer

User Configuration → Administrative Templates → System

Answer

Computer Configuration → Administrative Templates → Network

Answer

User Configuration → Windows Settings → Scripts

Question 5

What is the purpose of the Resultant Set of Policy (RSoP) tool in Windows Server 2008?

Accepted Answer

To simulate or view the effective Group Policy settings applied to a user or computer

Answer

To create new GPOs

Answer

To replicate GPOs between domain controllers

Answer

To delete conflicting GPOs

Question 6

Which command-line tool forces an immediate Group Policy refresh on a Windows Server 2008 machine?

Accepted Answer

gpupdate /force

Answer

secedit /refreshpolicy

Answer

gpresult /r

Answer

dcgpofix /force