Title: Lesson 21: Quiz
Course: RITA MC - ITNW 1354 > Section: Lesson 21: Managing Group Policy Objects

Q: Which domain users are automatically granted permissions to perform Group Policy Management tasks?
- local administrators
- power users
- domain administrators
- domain users
A: domain administrators
Feedback: In Active Directory, domain administrators are automatically granted permissions for performing Group Policy Management tasks.

Q: Why would you ever want or need to reset the domain policy and the domain controller policy to the default settings? Select all that apply.
- if they’ve become corrupted
- to refresh policy settings
- as a regular part of domain maintenance and housekeeping
- if someone deleted one of the policies
A: if they’ve become corrupted; if someone deleted one of the policies
Feedback: When you create a new domain, you start with the Default Domain Policy and Default Domain Controller Policy. If either of these gets deleted, corrupted, or you just want to start over, you can use the DCGPOFix.exe command.

Q: A user must have which two existing permissions for new permissions to be applied to their accounts for GPO delegation?
- Allow Read
- Allow Write
- Allow Apply
- Allow Modify
A: Allow Read; Allow Apply
Feedback: For permissions to be applied to users, they must have the Allow Read and Allow Apply group policy permissions.

Q: If you don’t want a GPO to apply, which group policy permission do you apply to a user or group?
- Disallow Read
- Disallow Write
- Disallow Modify
- Disallow Apply
A: Disallow Apply
Feedback: If you dont want a GPO to apply, you can assign the Disallow Apply group policy permission to a user or group.

Q: When you’re about to reset domain policy and domain controllers policy back to default with the dcgpofix.exe command, what final warning are you given before you accept the change?
- that you’re about to reset policies to their defaults
- that all User Rights Assignments will be replaced
- that all security for the domain will be overwritten
- that you’re about to restore all security to the default
A: that all User Rights Assignments will be replaced
Feedback: The dcgpofix.exe command says that it will replace all User Rights Assignments.

Q: To give someone permission to manage a particular GPO, you use the __________ tab of the individual GPO.
- Permissions
- Security
- Delegate
- Settings
A: Delegate
Feedback: To give someone permission to manage a particular GPO, you use the Delegate tab of the individual GPO.

Q: What is a collection of files stored in the SYSVOL (%SystemRoot%\SYSVOL\<Domain>\Policies\<GPOGUID>) of each domain controller?
- Group Policy Container (GPC)
- Group Policy Template (GPT)
- migration table
- delegation
A: Group Policy Template (GPT)
Feedback: The GPT is a collection of files stored in the SYSVOL (%SystemRoot%\SYSVOL\Domain\Policies\GPOGUID) of each domain controller.

Q: What is a file that maps references to users, groups, computers, and UNC paths in the source GPO to new values in the destination GPO?
- Group Policy Container (GPC)
- Group Policy Template (GPT)
- migration table
- delegation
A: migration table
Feedback: A migration table is a file that maps references to users, groups, computers, and UNC paths in the source GPO to new values in the destination GPO.

Q: What is an Active Directory object stored in the Group Policy Objects container with the domain naming content of the directory that defines basic attributes of the GPO but does not contain any of the settings?
- Group Policy Container (GPC)
- Group Policy Template (GPT)
- migration table
- delegation
A: Group Policy Container (GPC)
Feedback: The GPC is an Active Directory object stored in the Group Policy Objects container with the domain naming content of the directory. It defines basic attributes of the GPO but does not contain any of the settings.

Q: What process grants permissions to other users to manage group policies?
- Group Policy Container (GPC)
- Group Policy Template (GPT)
- migration table
- delegation
A: delegation
Feedback: In Active Directory, domain administrators are automatically granted permissions for performing Group Policy Management tasks. If you need to give other users permissions to manage group policies, you grant those permissions through delegation.