Microsoft Microsoft Certifications 98-365 Questions & Answers

• Question 151:

  You work as a System Administrator for company Inc. The company has a Windows Server 2016 Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2016.

  You are planning to create a group that can be used only for non-security functions, such as distributing e-mail messages.

  Which of the following groups will you create?

  A. Application group

  B. User group

  C. Distribution group

  D. Security group

  Correct Answer: C

  You should create a distribution group. A distribution group is used for non-security related functions. Administrators use a distribution group when the only function of the group is non- security related, such as sending e-mail messages to a

  group of users at the same time.

  Distribution groups cannot be used to assign permissions.

  Incorrect Answers:

  A, B: There are no such group types as user and application in Windows Server 2016.

  D: A security group is used to define permissions on resources and objects. It can be listed in discretionary access control lists (DACLs). Security groups can also be used for non- security purposes. A security group has all capabilities of a distribution group.

• Question 152:

  What are the two different ways of creating Group Policy Object (GPO) with the help of Group Policy Management Console (GPMC)? Each correct answer represents a complete solution. (Choose two.)

  A. Open the Group Policy Management Console (GPMC) and navigate to the Group Policy Objects node. Right-click the Group Policy Objects node, and click Properties. Change the default name of the GPO to your desired name, and then click OK.

  B. Open the Group Policy Management Console (GPMC) and navigate to the container where you want to apply the GPO. Right-click the container, and click Create A GPO In This Domain And Link It Here.

  C. Open the Group Policy Management Console (GPMC) and navigate to the Domain Controller where you want to apply the GPO. Right-click the controller, and click Create A GPO In This Domain And Link It Here.

  D. Open the Group Policy Management Console (GPMC) and navigate to the Group Policy Objects node. Right-click the Group Policy Objects node, and click New. Enter a descriptive name for the new GPO, and click OK.

  Correct Answer: BD

  A new Group Policy Object can be created in the following two ways:

  Open the Group Policy Management Console (GPMC) and navigate to the container where you want to apply the GPO. Right-click the container, and click Create A GPO In This Domain And Link It Here. Open the Group Policy Management

  Console (GPMC) and navigate to the Group Policy Objects node. Right-click the Group Policy Objects node, and click New. Enter a descriptive name for the new GPO, and click OK.

• Question 153:

  Which of the following master roles is used for synchronizing cross-domain group membership changes?

  A. Domain Naming Master role

  B. Infrastructure Master role

  C. Schema Master role

  D. RID Master role

  Correct Answer: B

  The Infrastructure Master role is used for synchronizing cross-domain group membership changes. Incorrect Answers:

  A: The Domain Naming Master role is used for controlling the addition and removal of domains from the forest if they are present in the root domain.

  C: The Schema Master role is used for controlling and handling updates and modifications to the Active Directory schema.

  D: The RID Master role is used for allocating pools of unique identifiers to domain controllers for use when creating objects.

• Question 154:

  You work as a Network Administrator for Perfect Solutions Inc. The company plans to establish a Windows 2016 Active Directory-based network. The network will be configured as a single forest and a multiple-domain network.

  You are planning for the placement of operations master roles.

  In this context, which of the following operations master roles are applied to the entire forest? Each correct answer represents a complete solution. (Choose two.)

  A. Domain naming master

  B. Schema master

  C. PDC emulator master

  D. Relative ID (RID) master

  Correct Answer: AB

  Schema master and domain naming master are operations master roles that are applied to the entire forest within an Active Directory network. The other operations master roles are applied per domain.

• Question 155:

  You work as a System Administrator for company Inc. The company has a Windows Server 2016 domain-based network. The network contains one Windows Server 2016 and twelve Windows 10 client computers.

  You want to centralize management and configuration of operating systems, applications, and user settings.

  What will you do?

  A. Apply NTFS permission.

  B. Implement an account policy.

  C. Apply an audit policy.

  D. Implement a group policy.

  Correct Answer: D

  In order to centralize management and configuration of operating systems, applications, and user settings in an Active Directory environment, you should implement a group policy. A group policy that is created by an administrator affects all

  users on a computer or all users on a domain.

  Group policies can be used for defining, customizing, and controlling the functioning of network resources, computers, and operating systems. They can be set for a for users or computers in a domain. Administrators can configure group

  policy settings for users as well as for computers in many ways. Group policies can be used to allow or restrict the access of a particular program by a particular user. It can also be used to configure the desktop, the Start menu, the taskbar,

  the Control Panel, and security settings among other things.

  Incorrect Answers:

  A: NTFS permission allows an administrator to control which users and groups can access files and folders on an NTFS volume.

  B: An account policy controls the password expiration policy, the lockout policy, and other password features.

  C: An audit policy determines whether security events are written to the security log in Event Viewer on the computer.

• Question 156:

  You work as a System Administrator for company Inc. The company has a Windows Server 2016 domain-based network. The network has 120 Windows 10 computers and two Windows Server 2016 servers.

  You want to ensure that when users log on to any client computer on the network, settings can be changed, but all settings are reset back to their default values when they log on again.

  What will you do to accomplish the task?

  A. Create a Group Policy Object.

  B. Create a local user profile.

  C. Create a roaming user profile.

  D. Create a mandatory user profile.

  Correct Answer: D

  In order to accomplish the task, you should create a mandatory user profile. A mandatory user profile is a preconfigured, read-only user profile that administrators can use to specify settings for users in a Windows environment. With a mandatory user profile, a user can modify the desktop, but any changes made are not saved when the user logs off. The next time the user logs on, the mandatory user profile set by the administrator is downloaded.

  Incorrect Answers:

  A: A Group Policy Object (GPO) is a collection of group policy settings. It affects the user and computer accounts located in sites, domains, and organizational units (OUs).

  B: A local user profile is stored locally on the hard drive of the computer on which the user logs on. If the user logs on to a different computer, he gets the default settings for that computer.

  C: A roaming user profile is stored in a centralized place and can be accessed from the network. When users log on to their computers, they receive the desktop setting as it existed when they logged off.

• Question 157:

  What are two functions of the Group Policy loopback feature? (Choose two.)

  A. Apply Group Policy Objects for only the current site.

  B. Apply Group Policy Objects that depend only on the computer the user logs on to.

  C. Apply only the local computer Group Policy Object.

  D. Give higher precedence to computer policy over user policy.

  Correct Answer: BD

  Loopback processing of Group Policy has two different modes, Replace and Merge. References: http://kudratsapaev.blogspot.se/2009/07/loopback-processing-of-group-policy.html

• Question 158:

  After the promotion of a computer to a domain controller, a user can use various MMC snap-in consoles to manage Active Directory.

  Which of these consoles is used for administering and publishing information in the directory, which includes managing users, groups, computers, domains, domain controllers, and organizational units?

  A. Active Directory Users and Computers

  B. Active Directory Sites and Services

  C. Active Directory Domains and Trusts

  D. Active Directory Administrative Center

  Correct Answer: D

  Active Directory Administrative Center console is used for administering and publishing information in the directory, which includes managing users, groups, computers, domains, domain controllers, and organizational units.

  A: Active Directory Users and Computers console is used for managing users, groups, computers, and organizational units but not domains.

  C: Active Directory Domains and Trusts console is used for administering domain trusts, domain and forest functional levels, and user principal name (UPN) suffixes.

  B: Active Directory Sites and Services console is used for administering replication of directory data among all sites in an Active Directory Domain Services forest.

• Question 159:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Active Directory user account names are not case sensitive.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct

  A. Can be from 1 to 256 characters in length

  B. Can contain numbers and letters but no special characters

  C. Must be created with a first and last name

  D. No change is needed.

  Correct Answer: D

  Active directory user names are not case sensitive.

• Question 160:

  Settings from which group policy object are processed first during logon?

  A. Domain

  B. Organizational Unit

  C. Local

  D. Site

  Correct Answer: C

  Group Policy settings are processed in the following order:

  References: Order of processing settings https://technet.microsoft.com/sv-se/library/cc778890%28v=ws.10%29.aspx