ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-100 All Questions

View all questions & answers for the MD-100 exam
Go to Exam

Exam MD-100 topic 3 question 100 discussion

Actual exam question from Microsoft's MD-100
Question #: 100
Topic #: 3
[All MD-100 Questions]

HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.
Several user settings are configured in a Default Domain Policy Group Policy Object (GPO).
Users sign in to Computer1 as shown in the following table.

You configure the following GPOs on Computer1:
✑ Local Computer
✑ Local Computer\User2
✑ Local Computer\Administrators
Local Computer\Non-Administrators

Each GPO has different user settings configured.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: No -

Box 2: Yes -

Box 3: Yes -
All account policies settings applied by using Group Policy are applied at the domain level. Default values are present in the built-in default domain controller policy for Password Policy settings, Account Lockout Policy settings, and Kerberos Policy settings. The domain account policy becomes the default local account policy of any device that is a member of the domain.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-policies
by PimSur at Oct. 2, 2022, 5:42 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Franzdepa
2 years, 1 month ago
no, no, no, Tested on my lab
upvoted 1 times
...
ChrisC21
2 years, 1 month ago
Seems to be a bit of vagueness around the word "apply". What does that mean? Does it mean that the Local computer policy "affects" User1? Or does it mean that it specially targets users and, therefore, User1? The former seems to make the most sense. But if that is the case, it clearly does apply to User1, and one can see this using gpresult /r where is shows that local group policy does indeed apply, although it does so at the lowest priority. So, my answers are Yes, Yes, and Yes. Then again, that's not how these tests go, since what is expected is Microsoft's answer, not necessarily the correct answer.
upvoted 2 times
...
DestinysPower
2 years, 1 month ago
The Local Computer GPO applies to User1: No The Local Computer\Administrators GPO applies to User2: Yes The Default Domain Policy GPO applies to User2: Yes Explanation: The Local Computer GPO only applies to local computer settings, so it does not apply to User1, who is a domain user. The Local Computer\Administrators GPO applies to User2, who is a member of the local Administrators group on Computer1. The Default Domain Policy GPO applies to all users and computers in the domain, including User2 who is a domain user. So it applies to User2.
upvoted 3 times
tfoi0001
2 years ago
User2 is not a Domain User...
upvoted 2 times
...
Colin888
1 year, 10 months ago
Its also effect the user : Local GPOs: A collection of group policy settings that only apply to the local computer and to the users who log into that computer. Local GPOs are used when policy settings need to apply to a single Windows computer or user. Local GPOs exist by default on all Windows computers.
upvoted 1 times
...
...
Harv717
2 years, 3 months ago
The question is about User Configuration part of GPOs. First statement: LGPO is applied to all users - both local and domain, so YES Second statement: LGPO\Administrators to user with admin permissions - YES Third statement: Domain GPO won't apply to local user - No
upvoted 4 times
...
kchris
2 years, 6 months ago
When looking at this question I think that "Where" the accounts were created is important. User 2 was created locally on Computer 1 as part of the Administrator group.
upvoted 1 times
...
flabezerra
2 years, 6 months ago
Third statemet: The Default Domain Policy is far from applying anything to User2. No, it won't apply the Default Domain Policy GPO to User2. First statement: If you apply a Default Domain Policy GPO to User1 it won't get a LGPO. Even if there are several LGPOs setted up. Second statement: No problems here. LGPO\Administrators will do normally for User2. The answers are NO, YES, NO. I also believe this question is all about User Configuration and if you try Desktop Wallpaper change for a lab test you will find the results above.
upvoted 2 times
flabezerra
2 years, 6 months ago
I found a new and last result about the third statement. If you use a default domain policy, and you apply anything down to Computer Configuration, it will do apply, as Computer1 is part of the Domain. As the article says: "The domain account policy becomes the default local account policy of any device that is a member of the domain". If you set anything from Default Domain - Computer Configuration, it will replicate magically down to the LGPO - Computer Configuration. Even if the LOCAL user is part of the administrators group, he will receive those configurations. So, yes, User2 will be applied. But this result above won't happen in anyway down to User Configuration in the Default Domain Policies. So, if you read again the question statement: "user settings", you will be confused as I am right now. So I do not know really what is the real choice here.
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago