YouaredesigningforimplementingGroupPolicyobjects(GPOs)tomeetthebusinessandtechnicalrequirement.Whatshouldyoudo?() A.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtothedomain.B.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtotheappropriateorganizationalunit(OU).C.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtoallorganizationalunits(OUs).D.CreatenewGPOstomatchthenumberoforganizationalunits(OUs).configuretheseGPOstoenforcesoftwarerestrictionpolicies.LinkthisGPOtoitsrespectiveOU.
YouaredesigningforimplementingGroupPolicyobjects(GPOs)tomeetthebusinessandtechnicalrequirement.Whatshouldyoudo?()
A.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtothedomain.
B.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtotheappropriateorganizationalunit(OU).
C.CreateonenewGPOtoenforcesoftwarerestrictionpolicies.LinkthisGPOtoallorganizationalunits(OUs).
D.CreatenewGPOstomatchthenumberoforganizationalunits(OUs).configuretheseGPOstoenforcesoftwarerestrictionpolicies.LinkthisGPOtoitsrespectiveOU.
相关考题：
YouneedtodesigntheconfigurationononeWindowsServer2003terminalserverthathoststheSalesForceMaxapplicationtomeetsecurityrequirements.Whichthreeactionsshouldyoutake?() A.ConfiguretheterminalserversothatuserslogonbyusinglocaluseraccountsB.ConfiguretheterminalserversothatuserslogonbyusingdomainaccountsC.ConfiguretheservertorunSalesForceMaxinadedicatedwindowwhenauserlogsontotheterminalserverD.ConfiguretheservertoalloweachusertohaveaWindowsdesktopwhentheuserlogsontotheterminalserverE.UsesoftwarerestrictionpolicesinGroupPolicyobjects（GPOs）thatapplytotheterminalserverF.UseAppsec.exetorestrictapplicationsontheterminalserver
Youneedtodesignastrategytomeetthecompany’srequirementsfore－mail.Whatshouldyoudo?() A.ConfigureandpublishacertificatetemplatethatissuitableforS/MIME,DeployaGroupPolicyobject（GPO）sothatacertificatethatisbasedonthistemplateisautomaticallyissuedtoalldomainusersB.SpecifyGroupPolicyobjects（GPOs）andIPSecpoliciesthatrequireallclientcomputerstouseKerberosauthenticationtoconnecttomailserversC.Foreachmailserver，acquireanSSLservercertificatefromacommercialCAwhoserootcertificateisalreadytrustedD.RequireIPSecencryptiononallTCPconnectionsthatareusedtosendorreceivee-mailmessages
Youaredesigningasecuritystrategyfortheinfrastructureserversattheresorts.Whichtwoactionsshouldyouperform?(Eachcorrectanswerpresentspartofthesolution.Choosetwo)() A.PlaceallinfrastructureserversinsubnetsthatcannotexchangeinformationwiththeInternetB.EstablishacustomsecuritytemplatethatcontainsuniquerequiredsettingsforeachcombinationofservicesthatrunontheinfrastructureserversC.UseGroupPolicyobjects（GPOs）toapplythecustomsecuritytemplateortemplatestothe InfrastructureserversD.Editthelocalpolicysettingstoconfigureeachindividualserver
YouneedtorecommendasolutionforcontrollingaccesstotheInternet.Thesolutionmustmeetthemuseum’ssecuritypolic.Whatshouldyouincludeintherecommendation?() A.FileServerResourceManager（FSRM）filescreensandGroupPolicyobjects（GPOs）B.MicrosoftForefrontThreatManagementGateway（TMG）2010C.MicrosoftForefrontUnifiedAccessGateway（UAG）2010D.WindowsFirewallwithAdvancedSecurityandGroupPolicyobjects（GPOs）
YouneedtorecommendasolutionformanagingGroupPolicythatmeetsthecompany’stechnicalrequirements.Whatshouldyourecommend?() A.Implementacentralstore.B.UpgradeDC3toWindowsServer2008R2.C.CreatestarterGroupPolicyobjects（GPOs）.D.DeployAdvancedGroupPolicyManagement（AGPM）.
YouarethenetworkadministratorforSouthridgeVideo.ThenetworkconsistsofasingleActiveDirectorydomainnamedsouthridgevideo.com.Thedomaincontainsonedomaincontroller.AllserversrunWindowsServer2003.AllclientcomputersrunWindowsXPProfessional.ThecompanyusesGroupPolicyobjects（GPOs）toconfigureuserandcomputersettings.TheActiveDirectorydatabaseandtheSYSVOLsharedfolderarestoredonseparateharddisks.TheharddiskcontainingtheSYSVOLfolderfails.SomeGroupPolicysettingsarestillapplied，butnewusersdonotreceivetheGroupPolicysettings.Youreplacethefaileddisk.YoudiscoverthattherearenovalidbackupsoftheSYSVOLfolder.YouhavealistofGUIDsandfriendlynamesforeachGPO.Onthenewdisk，youcreateanewsharedfoldernamedSYSVOLinthesamelocationasthepreviousSYSVOLfolder.Youneedtoconfigurethenetworksothattheuserandcomputersettingswillbeappliedtoallusers.Whichthreecoursesofactionshouldyoutake？（）
YouneedtorecommendastrategyformanagingWindowsFirewallthatmeetsthecompanystechnicalrequirements.Whatshouldyouincludeintherecommendation?() A.domain-basedGroupPolicyobjects（GPOs）B.localGroupPolicyobjects（GPOs）C.StarterGroupPolicyobjects（GPOs）D.SystemStarterGroupPolicyobjects（GPOs）
YournetworkconsistsofthreeActiveDirectoryforests.Foresttrustrelationshipsexistbetweenallforests.Eachforestcontainsonedomain.AlldomaincontrollersrunWindowsServer2008R2.Yourcompanyhasthreenetworkadministrators.EachnetworkadministratormanagesaforestandtheGroupPolicyobjects（GPOs）withinthatforest.YouneedtocreatestandardGPOsthatthenetworkadministratorsineachforestwilluse.TheGPOsmustmeetthefollowingrequirements：TheGPOsmustonlycontainsettingsforeitheruserconfigurationsorcomputerconfigurations.ThenumberofGPOsmustbeminimized.Whichtwoactionsshouldyouperform？（）
YournetworkconsistsofasingleActiveDirectorydomain.AllserversrunWindowsServer2008R2.YouneedtorecommendaGroupPolicydeploymentstrategy.Yourstrategymustsupportthefollowingrequirements：Domain-levelGroupPolicyobjects（GPOs）mustnotbeoverwrittenbyorganizationalunit（OU）levelGPOs.OU-levelGPOsmustnotapplytomembersoftheServerOperatorsgroup.Whatshouldyourecommend？（）A.EnableBlockInheritanceforthedomain，andthenmodifythepermissionsofallGPOslinkedtoOUs.B.EnableBlockInheritanceforthedomain，andthenenableLoopbackProcessingpolicymode.AddtheServerOperatorsgrouptotheRestrictedGroupslist.C.SetalldomainlevelGPOstoEnforced，andthenmodifythepermissionsoftheGPOsthatarelinkedtoOUs.D.SetalldomainlevelGPOstoEnforced，andthenenableLoopbackProcessingpolicymode.AddtheserverOperatorsgrouptotheRestrictedGroupslist.
YournetworkconsistsofasingleActiveDirectorydomain.Thedomaincontainsthreeorganizationalunits（OUs）namedTest，Application，andDatabase.YouneedtoredesignthelayoutoftheOUstosupportthefollowingrequirements：PreventGroupPolicyobjects（GPOs）thatarelinkedtothedomainfromapplyingto computerslocatedintheApplicationsOUMinimizethenumberofGPOsMinimizethenumberofOUsWhatshouldyouincludeinyourdesign？（）A.CreateaStarterGPO.B.CreateaWindowsManagementInstrumentation（WMI）filter.C.DelegatepermissionsontheApplicationOU.D.ConfigureblockinheritanceontheApplicationOU.
You need to configure Internet Explorer to meet the companys technical requirements.Which GPO or GPOs should you modify？（）A、Default Domain PolicyB、GPO1C、GPO2 and GPO3D、GPO4 and GPO5
You are designing for implementing Group Policy objects (GPOs) to meet the business and technical requirement. What should you do?（）A、Create one new GPO to enforce software restriction policies. Link this GPO to the domain.B、Create one new GPO to enforce software restriction policies. Link this GPO to the appropriate organizational unit (OU).C、Create one new GPO to enforce software restriction policies. Link this GPO to all organizational units (OUs).D、Create new GPOs to match the number of organizational units (OUs).configure these GPOs to enforce software restriction policies. Link this GPO to its respective OU.
Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit. You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units. Which two actions should you perform（）A、Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.B、Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective orgC、Run the Delegation of Control Wizard and delegate the right to link GPOs for the domain to the branch office adminD、Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch organizational units to the
Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You need to recommend a Group Policy deployment strategy. Your strategy must support the following requirements： èDomain-level Group Policy objects （GPOs） must not be overwritten by organizational unit （OU） level GPOs. èOU-level GPOs must not apply to members of the Server Operators group. What should you recommend？（） A、Enable Block Inheritance for the domain，and then modify the permissions of all GPOs linked to OUs.B、Enable Block Inheritance for the domain， and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.C、Set all domain level GPOs to Enforced， and then modify the permissions of the GPOs that are linked to OUs.D、Set all domain level GPOs to Enforced，and then enable Loopback Processing policy mode.Add the server Operators group to the Restricted Groups list.
Your company has an Active Directory forest. The company has branch offices in three locations. Each location has an organizational unit. You need to ensure that the branch office administrators are able to create and apply GPOs only to their respective organizational units. Which two actions should you perform（）A、Add the user accounts of the branch office administrators to the Group Policy Creator Owners Group.B、Modify the Managed By tab in each organizational unit to add the branch office administrators to their respective organizational units.C、Run the Delegation of Control Wizard and delegate the right to link GPOs for the domain to the branch office administrators.D、Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch organizational units to the branch office administrators.
You need to recommend a strategy for managing Windows Firewall that meets the companys technical requirements. What should you include in the recommendation？（）A、domain-based Group Policy objects （GPOs）B、local Group Policy objects （GPOs）C、Starter Group Policy objects （GPOs）D、System Starter Group Policy objects （GPOs）
You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects （GPOs） in the corp.contoso.com domain. What should you do？（）A、 Delegate the Manage Group Policy links permission in the corp.contoso.com domain to the user.B、 Add the user to a domain local group in the corp.contoso.com domain， and grant the domain local group the permission to create GPOs in the corp.contoso.com domain.C、 Add the users user account to the Group Policy Creator Owners group in the contoso.com domain.D、 Grant the Group Policy Creator Owners group in the corp.contoso.com domain the Full Control permission for the GPOs in the corp.contoso.com domain.
单选题Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database. You need to redesign the layout of the OUs to support the following requirements： èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU èMinimize the number of GPOs èMinimize the number of OUs What should you include in your design？（）ACreate a Starter GPO.BCreate a Windows Management Instrumentation （WMI） filter.CDelegate permissions on the Application OU.DConfigure block inheritance on the Application OU.
多选题Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects （GPOs） within that forest. You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements： èThe GPOs must only contain settings for either user configurations or computer configurations. èThe number of GPOs must be minimized. Which two actions should you perform？（）AExport the new GPOs to .cab files. Ensure that the .cab files are available to the network administrator in each forest.BCreate two new GPOs. Configure both GPOs to use the required user configurations and the required computer configurations.CCreate two new GPOs. Configure one GPO to use the required user configuration. Configure the other GPO to use the required computer configuration.DBack up the Sysvol folder that is located on the domain controller where the new GPOs were created. Provide the backup to the network administrator in each forest.
单选题You need to recommend a solution for controlling access to the Internet.The solution must meet the museum’s security polic. What should you include in the recommendation？（）AFile Server Resource Manager （FSRM） file screens and Group Policy objects （GPOs）BMicrosoft Forefront Threat Management Gateway （TMG） 2010CMicrosoft Forefront Unified Access Gateway （UAG） 2010DWindows Firewall with Advanced Security and Group Policy objects （GPOs）
单选题You need to configure Internet Explorer to meet the companys technical requirements.Which GPO or GPOs should you modify？（）ADefault Domain PolicyBGPO1CGPO2 and GPO3DGPO4 and GPO5
单选题Your company has an Active Directory forest that contains eight linked Group Policy Objects （GPOs）. One of these GPOs publishes applications to user objects. A user reports that the application is not available for installation. You need to identify whether the GPO has been applied What should you do（）ARun the Group Policy Results utility for the user.BRun the Group Policy Results utility for the computer.CRun the GPRESULT /SCOPE COMPUTER command at the command prompt.DRun the GPRESULT /S /Z command at the command prompt.
单选题You are designing for implementing Group Policy objects （GPOs） to meet the business and technical requirement. What should you do？ （）A Create one new GPO to enforce software restriction policies. Link this GPO to the domain.B Create one new GPO to enforce software restriction policies. Link this GPO to the appropriate organizational unit （OU）.C Create one new GPO to enforce software restriction policies. Link this GPO to all organizational units （OUs）.D Create new GPOs to match the number of organizational units （OUs）.configure these GPOs to enforce software restriction policies. Link this GPO to its respective OU.