Welcome to Certifiable, your exam prep headquarters. Here you'll find questions about some of the tricky areas that are fair game for the certification exams. Following the questions, you'll find the correct answers and explanatory text. We change the questions biweekly.

Test Questions (September 22, 2000)
Test Answers (September 22, 2000)

Questions (September 22, 2000)

The following questions cover topics similar to those you can find on Exam 70-240: Microsoft Windows 2000 Accelerated Exam for MCPs Certified on Microsoft Windows NT 4.0.

Active Directory (AD) is the most significant difference between Win2K and NT. If you hope to pass Exam 70-240, you need to thoroughly understand how to design and administer AD. Whether you can correctly answer scenario-based exam questions depends on your understanding of how different AD features work and when and how you should use them.

One of the tools you can use to manage computers in a Win2K domain is Group Policies. Although policies are available in NT, Win2K's Group Policies offer many more options. The following questions will help you determine whether you understand how to implement policies to manage computers for an entire enterprise.


Question 1 Which steps must you take to implement Group Policies in Active Directory (AD)? (Choose two)

  1. Create a Group Policy Object (GPO).
  2. Create a Group Policy template.
  3. Create a Group Policy container.
  4. Associate the GPO with the appropriate container.
  5. Associate the GPO with the appropriate Group Policy template.

Question 2
What are the Administrative Template settings for policies? (Choose three)

  1. Allow
  2. Deny
  3. Enabled
  4. Disabled
  5. Not Configured

Question 3
What steps should you take to apply a Group Policy in Active Directory (AD)?

  1. Right-click the appropriate container and choose Properties, Group Policy, Properties, Security, and then select the Allow Group Policy check box.
  2. Right-click the appropriate GPO and choose Properties, Group Policy, Security, and then select the Allow Group Policy check box.
  3. Right-click the appropriate group policy container and choose Properties, Group Policy, Security, and then select the Allow Group Policy check box.
  4. Open Active Directory Users and Computers and choose Properties, Group Policy, Security, and then select the Allow Group Policy check box.

Answers (September 22, 2000)

Answer to Question 1
The correct answers are A—Create a GPO and D—Associate the GPO with the appropriate container. The GPO is an AD object that stores the various configuration settings for specified users and computers. When you create a GPO, AD creates a Group Policy container that stores the GPO's version and status information and creates a Group Policy Template, which is a folder structure on a specified domain controller to store all the detailed information for administrative templates, security, software installation, scripts, and folder redirection.

To implement policies using Group Policy, you must create a GPO and then associate it with a specific container so that the policies affect all the container's users or computers and all child containers. Multiple policies can affect a given object, so AD applies policies in the order of site, domain, and OU to give OU-level policies precedence. You can change this policy inheritance from parent OU to child organizational unit (OU) by setting either No Override, which prevents a child OU from overriding a parent OU setting, or Block Inheritance, which lets a child OU block policies from its parent.

Answer to Question 2
The correct answers are C—Enabled, D—Disabled, and E—Not Configured. To implement policies using Group Policy, you must create a GPO and associate it with a specific container so that the policies affect all of a container's users or computers and all child containers. After you create GPOs, you can edit them either in the properties of the associated organizational unit (OU) or by creating a custom Microsoft Management Console (MMC) using the Group Policy snap-in. Group Policy's main sections, User Configuration and Computer Configuration, each have folders called Software Settings, Windows Settings, and Administrative Templates. Within these folders, you can specify settings by selecting the Enabled, Disabled, and Not Configured check boxes.

Answer to Question 3
The correct answer is A—Right-click the appropriate container and choose Properties, Group Policy, Properties, Security, and then select the Allow Group Policy check box. When you first create a GPO, there are two sets of defaults: the Authenticated Users group will have Read and Apply Group Policy permissions; the System account, Domain Admins, and Enterprise Admins will have Read, Create All Child Objects, and Delete All Child Objects permissions. To enable Group Policies to affect a container, right-click the container and choose Properties, Group Policy, Properties, Security, and then select the Allow Group Policy check box.