exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 129 discussion

Actual exam question from Microsoft's 70-742
Question #: 129
Topic #: 1
[All 70-742 Questions]

Your company recently deployed a new child domain to an Active Directory forest.
You discover that a user modified the Default Domain Policy to configure several Windows components in the child domain.
A company policy states that the Default Domain Policy must be used only to configure domain-wide security settings.
You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO.
You need to restore the Default Domain Policy to the default settings from when the domain was first installed.
What should you do?

  • A. From Group Policy Management, click Starter GPOs, and then click Manage Backups.
  • B. From a command prompt, run the dcgpofix.exe command.
  • C. From Windows PowerShell, run the Copy-GPO cmdlet.
  • D. Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
TMW
Highly Voted 5 years, 7 months ago
Yep. From the Microsoft official exam reference: If you wish to restore only one or the other default GPO, run the DCGPOFix command with the following parameters:  /target:Domain Resets only the Default Domain Policy.  /target:DC Resets only the Default Domain Controllers Policy.
upvoted 16 times
lbs
4 years, 10 months ago
As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. Additionally, you should configure the Default Domain Controllers Policy GPO only to set user rights and audit policies.
upvoted 1 times
...
...
lofzee
Most Recent 4 years, 3 months ago
Yes. Running B will restore both the default domain and default domain controller policies
upvoted 1 times
...
Robbr
4 years, 4 months ago
https://docs.microsoft.com/en-us/troubleshoot/windows-server/group-policy/dcgpofix-not-restore-default-domain-controller-policy-security-settings All documentation that I've searched for, refers to Windows Server 2003
upvoted 1 times
...
mikl
4 years, 7 months ago
Easy A!
upvoted 1 times
alexnt
4 years, 6 months ago
It is B
upvoted 4 times
...
GoldenFox
4 years, 3 months ago
Easy B!
upvoted 2 times
...
...
Kamikazekiller
4 years, 9 months ago
Answer is: B. From a command prompt, run the dcgpofix.exe command.
upvoted 1 times
...
ITGEEK
5 years, 2 months ago
Answer is correct https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix
upvoted 2 times
...
coleman
5 years, 4 months ago
right .
upvoted 2 times
...
mjgarciav1
5 years, 9 months ago
sure? I think that the answer A it's correct too
upvoted 2 times
Justin0020
5 years ago
It can be true, but the question did not tell you that there is a backup, but good point.
upvoted 1 times
...
ArchBishop
5 years, 8 months ago
You could perform a restore of a GPO by importing it from a previously exported backup, however that is not what A is suggesting. B is the correct answer because dcgpofix.exe is specifically used to target and restore either the Default Domain Policy, the Default Domain Controller Policy, or both.
upvoted 10 times
GenjamBhai
4 years, 8 months ago
B is ok
upvoted 3 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago