PrepAway - Latest Free Exam Questions & Answers

You need to merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1

Your network contains an Active Directory domain named contoso.com.
All of the AppLocker policy settings for the member servers are configured in a Group Policy
object (GPO) named GPO1.
A member server named Server1 runs Windows Server 2012 R2.
On Server1, you test a new set of AppLocker policy settings by using a local computer
policy.
You need to merge the local AppLocker policy settings from Server1 into the AppLocker
policy settings of GPO1.
What should you do?

PrepAway - Latest Free Exam Questions & Answers

A.
From Local Group Policy Editor on Server1, export an .inf file. Import the .inf file by using
Group Policy Management Editor.

B.
From Server1, run the Set-ApplockerPolicycmdlet.

C.
From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by
using Group Policy Management Editor.

D.
From Server1, run the New-ApplockerPolicycmdlet.

Explanation:
The Set-AppLockerPolicycmdlet sets the specified Group Policy Object (GPO) to contain the
specified AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) is specified,
the local GPO is the default.
When the Merge parameter is used, rules in the specified AppLocker policy will be merged
with the AppLocker rules in the target GPO specified in the LDAP path. The merging of
policies will remove rules with duplicate rule IDs, and the enforcement setting specified by
the AppLocker policy in the target GPO will be preserved. If the Merge parameter is not
specified, then the new policy will overwrite the existing policy.
References:
http://technet.microsoft.com/en-us/library/ee791816(v=ws.10).aspx
Exam Ref 70-410: Installing and configuring Windows Server 2012 R2, Chapter 10:
Implementing Group Policy, Lesson1: Planning, Implementing and managing Group Policy,
p. 479

One Comment on “You need to merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1”

  1. Aberdeen Angus says:

    Not Set-AppLockerPolicy. From a read Set-AppLockerPolicy reads an AppLocker policy XML file and writes it to a GPO, either a GPO on the domain if its LDAP path is supplied, or the local GPO if not.

    But in this scenario we don’t have an AppLocker policy XML file, we have a local GPO which has been set up to contain Applocker rules.

    If I go into the GPO Editor for the local GPO, and go to the Applocker node and right-click it, there are options “Export Policy” and “Import Policy”. Both prompt for files with an extension of xml.

    So C seems to fit “From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by using Group Policy Management Editor.”




    0



    0

Leave a Reply