You work as the network administrator for citycentral.com. You have recently
received instruction to start modifying the Default Domain Policy GPO. You should
stop the ability of the network users to install any application which is not
approved. Your solution is required to prevent the network users of the City
Central Utilities network from being able to install unauthorized software.
What should you do?
A. You should enable the Disable Windows Installer policy with a setting of For
non-managed apps only 350-001
B. You should add a Software Installation Policy which assigns approved applications to
domain users
C. You should Enable the Disable Windows Installer policy with a setting of Always
D. You should Disable the Windows Installer policy
Answer: A
Explanation: In the scenario you should consider making these configuration
changes as this will allow you to control the applications that the users are capable
of installing thereby stopping unauthorized applications from being installed.
1. The Chief Security Officer also wants to have a consistent set of programs and
applications to be defined and deployed.640-802 The City Central Utilities Domain users should
not be able to update or install any software components other than those approved by
members of the CCUAdmin group.
Incorrect Answers:
B: In the scenario you should not use this option because this will not prevent the users VCP-310
from installing unauthorized application but will simply assign or publish the
applications to the users.
C, D: You should not take this action in the scenario because this allows the users to
install Windows Installer-based applications at will be it unauthorized or not.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment