Chapter 18 Install/Config Windows Server2012

24 July 2022
4.7 (114 reviews)
21 test answers

Unlock all answers in this set

Unlock answers (17)
question
Software restriction relies on four types of rules to specify which programs can or cannot run. What type identifies software by its directory where the application is stored in the file system?
answer
Path
question
What service does AppLocker require running to function properly?
answer
Application Identity
question
How would you configure the system so that an application will create a shortcut in the Start menu on a user's workstation and when the user clicks the shortcut, the actual installation is performed?
answer
Publish an application to a user
question
What are the three default security levels within software restriction policies?
answer
Unrestricted, Disallowed, and Basic User
question
After deploying software by GPO using the Published option, where is the package made available for the user?
answer
Windows Control Panel
question
After deploying software by GPO using the Assigned option, where is the package made available for the user?
answer
Start menu or desktop
question
Software restriction relies on four types of rules to specify which programs can or cannot run. What type uses a digital certificate to confirm its legitimacy?
answer
Certificate
question
How does AppLocker handle all executables, installer packages, and scripts by default?
answer
AppLocker blocks all by default, except for those specified in Allow rules.
question
Software restriction relies on four types of rules to specify which programs can or cannot run. What type relies on a value generated by an algorithm that creates a fingerprint of the file, which makes it impossible for another program to have the same value?
answer
Hash
question
When installing software using Group Policy, what file or files does an administrator use?
answer
Windows Installer package files, or .msi files-modifications to the package files require transform files, or .mst files. Further, patch files are designated as .msp files.
question
What service works with Group Policy to install, upgrade, patch, or remove software applications?
answer
Windows Installer
question
What is the most common way to implement software restriction policies?
answer
Linking Group Policy objects to Active Directory Domain Services containers, so that you can apply their policy settings to several computers simultaneously
question
Software restriction relies on four types of rules to specify which programs can or cannot run. What type enables Windows Installer packages to be installed only if they come from a trusted area of the network?
answer
Network zone
question
What is required to prepare applications with an approval stamp from Microsoft on its packaging, including the Certified for Windows Server 2012 R2 logo, for Windows Installer?
answer
Nothing-the application is Windows Installer-enabled
question
What Windows versions support the use of AppLocker polices, which poses a disadvantage compared to using software restriction policies?
answer
Windows 7 and Windows Server 2008 R2 or later
question
In what Group Policy objects container are AppLocker settings located?
answer
Computer ConfigurationWindows SettingsSecurity SettingsApplication Control PoliciesAppLocker
question
Not all software on the market provides .msi support. What is your best option to use Windows Installer to assign and publish the software?
answer
Repackage the software for Windows Installer.
question
What is AppLocker also known as?
answer
Application control policies
question
When configuring software restriction policies, there are four rules that help determine the programs that can or cannot run. Select which of the following is NOT one of those rules.
answer
File location rule
question
When configuring a GPO to deploy a software package, what is the difference between assigning and publishing the application?
answer
Assigning forces the application, whereas publishing provides the option to install.
question
You want to deploy software using Group Policy. What is necessary before assigning the software to a user account?
answer
You must create a distribution share, also called a software distribution point. Then create the Group Policy Object, specifying how to deploy the application.