You use this to help prevent password cracking attempts.
What is configure account lockout settings?
100
In Windows Server 2012 R2, the maximum tolerance for computer clock synchronization determines the maximum time difference (in minutes) that the Kerberos V5 protocol tolerates between the time on the client clock and the time on the domain controller. The default is______.
What is 5 minutes?
100
A password’s _____ is a key component of its strength.
What is length ?
100
When a site, domain or OU has multiple group policies, this is how they are processed.
What is by order of precedence?
100
Default users receive this group policy permission.
What is apply?
200
By default, an old password cannot be reused until after this number of passwords have been used.
What is 24 old passwords?
200
Reason for changing administrators passwords more frequently than user passwords.
What is administrator accounts require more security.
200
If you have departments within your administrative jurisdiction and some are more security-sensitive than others, you can use this to make their user accounts more secure.
What is implement fine-grained password policies?
200
The name for the flow of group policies.
What is inheritance?
200
To use WMI filters, you need to have a domain controller at this functional level.
What is Windows Server 2003 or higher?
300
The minimum password length setting defines the minimum number of characters that a user’s password must contain. The default value for password length is ______.
What is 7?
300
The easiest method to access the account policies is to execute _________ from a command prompt to open the Local Security Policy.
What is secpol.msc?
300
The default domain functional level required before you can use fine-grained password policies.
What is Server 2008 or higher?
300
The first step in the Group Processing Order.
What is Computer startup is first. The computer connects to the DC then receives any group policies that are applying to the computer.
300
Number of WMI filters that can be configured for a GPO.
What is one?
400
When using an account lockout policy duration, what setting will require an administrator to unlock the account manually?
What is 0?
400
The primary advantage of using Group Policies in a domain environment is this.
What is centralized management?
400
This group policy is linked to the domain and affects all users and computers in the domain.
What is Default Domain Policy?
400
Users do not typically see Group Policy processing because of this reason.
What is the user is not logged in yet?
400
Use this command from the powershell to have GPO settings apply immediately.
What is Invoke-GPUpdate?
500
This group has read-write permissions to the default domain policy.
What is domain admins?
500
When using Password Settings Objects (PSOs), use this method to assign PSOs to users.
What is it is best to assign the PSO to a global security group and then add the user to the global security group.
500
The processing order for Group Policy
What is LSDOU? Local, Site, Domain, and OU?
500
This is the default timeout value for GPOs to process at startup.
What is 600 seconds or 10 minuites?
500
Starting with Windows 8.1 and Server 2012 R2 you can do this to improve the performance when processing synchronous group policy settings.