MCTS 70-640 Group Policy Administration & Security Settings

Question 1

In what order are Group Policy Objects (GPOs) applied in Active Directory?

Accepted Answer

Local, Site, Domain, OU

Answer

GPOs are applied in LSDOU order: Local, Site, Domain, then Organizational Unit, with later policies able to override earlier ones.

Question 2

What does the 'Block Inheritance' option on an OU do?

Accepted Answer

Prevents GPOs from a parent container from applying to the OU

Answer

Block Inheritance stops GPOs linked at parent containers (domain or higher-level OUs) from flowing down to the OU where it is set.

Question 3

Which GPO setting overrides 'Block Inheritance' to force a policy to apply regardless?

Accepted Answer

No Override (Enforced)

Answer

Setting a GPO link to 'Enforced' (formerly No Override) prevents Block Inheritance from stopping that GPO from applying.

Question 4

Which Group Policy section contains settings like Account Lockout Policy and Password Policy?

Accepted Answer

Computer Configuration → Windows Settings → Security Settings → Account Policies

Answer

Account Policies including Password Policy and Account Lockout Policy are found under Computer Configuration → Windows Settings → Security Settings → Account Policies.

Question 5

What is the purpose of the Resultant Set of Policy (RSoP) tool in Windows Server 2008?

Accepted Answer

To simulate or view the effective Group Policy settings applied to a user or computer

Answer

RSoP reports the net result of all GPOs applied to a specific user or computer, helping administrators troubleshoot policy conflicts.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Group Policy Administration & Security Settings