MCSA Exam 70-742, Chapter 3 - User and Service Account Configuration, Q&A. Preceding answers

MCSA Exam 70-742, Chapter 3 - User and Service Account Configuration, Q&A. Preceding answers REFERENCE: Overview of User Accounts and Group Policies - -Which of the following are the main functions of user accounts? (Choose all that apply.) a. User authentication b. Biometric identity c. Autonomous access d. Detailed information b. SAM database REFERENCE: Overview of User Accounts and Group Policies - -Where are user accounts stored on a standalone computer? a. SQL database b. SAM database c. Active Directory d. A flat file a. Default Domain Controllers Policy d. Default Domain Policy REFERENCE: Creating and Configuring Group Policies - -Which of the following GPOs are created by default when Active Directory is installed? (Choose all that apply.) a. Default Domain Controllers Policy b. Default Group Policy c. Default Active Directory Domain Policy d. Default Domain Policy d. Account policies are under the Computer Configuration node. REFERENCE: Configuring Account Policies - -Which of the following is true about GPOs? a. They affect all groups in their scope. b. Account policies are under the User Configuration node c. The Default Domain Policy affects only user accounts. d. Account policies are under the Computer Configuration node. a. Password Policy c. Account Lockout Policy d. Kerberos Policy REFERENCE: Configuring Account Policies - -Which of the following is included in account policies for a GPO? (Choose all that apply.) a. Password Policy b. Authorization Policy c. Account Lockout Policy d. Kerberos Policy d. Defines the number of times a user's password can be entered incorrectly REFERENCE: Configuring Account Policies - -Which of the following best describes the Account lockout threshold setting? a. Specifies how many minutes a user's account is locked b. Defines the number of times a user can enter an incorrect user name c. Specifies the number of minutes that must elapse between failed logon attempts d. Defines the number of times a user's password can be entered incorrectly c. Password policies can be set only at the domain level. REFERENCE: Configuring Account Policies - -A junior administrator is configuring settings for the Password Policy of a new GPO he created and sets the minimum password length to 4. He links the GPO to the EngUsers OU containing the user and group accounts for the Engineering Department. A user in the Engineering Department calls and says he's trying to change the password on his domain user account to A$c1, but the system isn't taking the new password. What's the problem? a. The user doesn't belong to the Engineering group. b. The user's computer account isn't in the EngUsers OU. c. Password policies can be set only at the domain level. d. The user can't use the $ symbol in the password. a. ADAC c. ADSI Edit d. PowerShell REFERENCE: Creating and Configuring a PSO - -Which of the following can be used by a Windows Server 2016 administrator to create a PSO? (Choose all that apply.) a. ADAC b. Server Manager c. ADSI Edit d. PowerShell c. Change the value for the Minimum password age setting. REFERENCE: Configuring Account Policies - -You discovered that a user changed his password 10 times in one day. When you ask why he did this, he replied that the system required him to change his password. He wanted to use his favorite password, but the system wouldn't accept it until he changed it 10 times. What should you do to prevent this user from reusing the same password for at least 60 days? a. Change the value for the Enforce password history setting. b. Change the value for the Maximum passw