click below
click below
Normal Size Small Size show me how
CTSYSADL_Week 7
| Question | Answer |
|---|---|
| Group Policy Objects are collections of policy settings used to define configurations for both users and computers in an Active Directory environment. | True. |
| A GPO is limited only to password policy configuration and cannot manage software installation, scripts, or user environments. | False - A GPO can manage many settings, including security options, software installation policies, scripts, desktop settings, drive mappings, and other user or computer configurations. |
| In Active Directory environments, GPOs help administrators centralize the management of user and computer settings across the network. | True. |
| GPOs are mainly useful in small peer-to-peer networks and do not depend on Active Directory for centralized policy management. | False - GPOs are designed for centralized management in Active Directory environments. |
| One major purpose of GPOs is to help maintain consistency across multiple computers and users in a network. | True. |
| A properly configured GPO can enforce password policies, account lockout policies, and firewall settings. | True. |
| GPOs cannot improve security because they only modify visual settings such as wallpapers and Start menu options. | False - GPOs can enforce security policies such as password rules, account lockout settings, firewall configurations, restrictions, and access controls. |
| Using GPOs can reduce administrative workload because repetitive configuration tasks can be automated. | True. |
| Configuration drift happens when systems move away from the desired standard settings, and GPOs can help reduce this risk. | True. |
| GPOs are only applied manually one computer at a time, which makes them inefficient for large networks. | False - GPOs are used to centrally apply settings across many users and computers, making them efficient for large networks. |
| GPOs can be used to deploy software applications to selected users or computers within a network. | True. |
| Software deployment through GPOs helps ensure that required applications are installed on designated machines. | True. |
| GPOs cannot be used to control access to specific applications, websites, or system resources. | False - GPOs can apply restrictions and controls based on user roles or organizational requirements. |
| A GPO can be used to configure user environment settings such as desktop backgrounds, drive mappings, and Start menu options. | True. |
| The main benefit of effective GPO management is only faster software installation, not security or consistency. | False - Effective GPO management improves security, maintains configuration consistency, saves time through automation, and reduces human error. |
| GPOs help administrators enforce organization-wide standards by applying policy settings uniformly across the network. | True. |
| Consistent application of GPO settings can help reduce vulnerabilities and improve the security posture of an organization. | True. |
| Group Policy Management Console is a Microsoft Management Console snap-in used to manage Group Policy Objects in Active Directory environments. | True. |
| GPMC only allows administrators to view GPOs, but it cannot create, edit, or link them. | False - GPMC allows administrators to create, edit, link, and manage GPOs, including security settings, preferences, and configurations. |
| PowerShell can be used for GPO management through command-line cmdlets. | True. |
| PowerShell cmdlets for GPO management are useful only for viewing GPOs and cannot automate bulk operations. | False - PowerShell cmdlets can automate tasks such as creating GPOs, applying settings, and performing bulk operations. |
| New-GPO, Get-GPO, Set-GPPermission, and Invoke-GPUpdate are examples of PowerShell cmdlets related to GPO management. | True. |
| Invoke-GPUpdate is a third-party tool used only by Netwrix to monitor unauthorized GPO changes. | False - Invoke-GPUpdate is a PowerShell cmdlet used to trigger Group Policy updates. |
| Netwrix Group Policy Change Reporter is used to monitor GPO changes and alert administrators about unauthorized modifications. | True. |
| Specops Gpupdate enhances GPO management through features such as remote updating, reporting, and troubleshooting. | True. |
| ManageEngine Desktop Central provides GPO management together with features like patch management, software deployment, remote desktop sharing, and mobile device management. | True. |
| PolicyPak focuses only on antivirus management and has no relation to Group Policy Preferences or application settings. | False - PolicyPak provides tools for managing GPOs, Group Policy Preferences, and enforcing application settings across the network. |
| GPOs can help reduce human errors because administrators do not need to manually configure every machine individually. | True. |
| In a certification-level scenario, using GPOs to enforce password policy and account lockout policy is an example of applying centralized security control. | True. |
| If an administrator wants a single interface for creating, editing, linking, and managing GPOs, the correct tool is Group Policy Management Console. | True. |