Questions and Answers

10-37

but with several key changes to certain security policies, which she supplies to them as

a printed list of policies and their new values.

The three administrators, Tom, Dick, and Harry, each go off to perform their tasks sep-

arately. They proceed as follows:

■

Tom opens the Security Configuration And Analysis snap-in on his domain con-

troller, creates a new database, and imports the Hisecdc.inf security template into

it. After performing an analysis using the snap-in, Tom opens each policy on the

list of changes the director has given him and modifies it to the value on the list.

■

Dick uses the Security Templates snap-in to create a new template containing the

settings on the list of changes the director has given him. Then he creates two

Group Policy Objects, links them both to the Domain Controllers organizational

unit in Active Directory, and applies the templates to the Group Policy Objects,

Hisecdc.inf to the first one and the new template he created to the second.

■

Harry uses the Security Templates snap-in to modify the Hisecdc.inf template by

changing the policies on the list of changes to the values specified on the list.

Then he uses the Secedit.exe utility to apply the modified template to the domain

controller.

1. Based on this information, which of the following statements is true?

a. None of the three administrators has correctly configured the new domain

controllers with the appropriate security settings.

b. One of the three domain controllers is correctly configured with the appro-

priate security settings; the other two are not.

c. Two of the three domain controllers are correctly configured with the appro-

priate security settings; the other one is not.

d. All three of the new domain controllers are correctly configured with the

appropriate security settings.

c