Manage Windows Server by Using Domain-Based Group Policies AZ-800 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has a GPO that configures a specific security setting for all computers in the domain. They want to exclude a group of computers in the IT OU from this setting. The IT OU has a GPO linked that sets the same setting to a different value. What should you do to ensure the IT OU computers get the different value?

   • ASet the Enforced option on the IT OU GPO link.
   • BMove the IT OU computers to a different OU.
   • CBlock inheritance on the IT OU.
   • DModify the security filtering on the domain-level GPO to exclude the IT OU computers.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which type of GPO filtering uses Windows Management Instrumentation (WMI) queries to determine whether a GPO applies to a computer?

   • ALoopback processing
   • BWMI filtering
   • CItem-level targeting
   • DSecurity filtering
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of item-level targeting in Group Policy Preferences?

   • ATo enforce a preference so that users cannot change the setting.
   • BTo filter which computers receive the GPO using WMI queries.
   • CTo apply a preference item only when certain conditions are met, such as the user being a member of a specific group.
   • DTo prevent a GPO from being linked to an OU.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key difference between Group Policy Preferences (GPP) and standard Group Policy settings?

   • APreferences require a domain controller running Windows Server 2016 or later.
   • BPreferences can only be applied to computers, not users.
   • CPreferences are stored in the registry.pol file, while standard settings are stored in XML files.
   • DPreferences are not enforced; users can change the settings after they are applied.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a GPO linked to the domain that configures a specific security setting for all computers. The setting should not apply to computers that are running Windows 10 version 1809 or earlier. You need to ensure that the GPO is applied only to computers running Windows 10 version 1903 or later. What should you do?

   • AAdd a WMI filter that queries for Windows 10 version 1903 or later and link the filter to the GPO.
   • BCreate a new GPO with the setting and link it to an OU that contains only the computers running Windows 10 version 1903 or later.
   • CModify the security filtering on the GPO to include only computers running Windows 10 version 1903 or later.
   • DUse Group Policy Preferences with item-level targeting to apply the setting only to computers running Windows 10 version 1903 or later.
   Reveal Solution Discussion Select an answer first