VCP-310, 350-001 testking and 640-802 dumps

You work as the network administrator at certifyme.com. The certifyme.com
network consists of a single Active Directory domain named certifyme.com. All
servers on the certifyme.com network run Windows Server 2003 and all client
computers run Windows XP Professional.

The certifyme.com network contains file and print servers, Web servers, and
terminal servers. A new certifyme.com security policy requires that:

1. Each server, regardless of its type, must be configured with security settings that
are specific to that type of server.
2. Certain baseline settings are applicable to all servers and server-specific settings
should take precedence if it conflicts with the settings for all servers.

You create the security templates listed below:

1. AllSrv.inf
2. WebSrv.inf
3. FPS.inf
4. TS.inf

You need to ensure that these security templates are applied in accordance with
certifyme.com's new security policy, without affecting client computers.

What should you do?

A. Import the templates into a GPO in the following order: AllSrv.inf, WebSrv.inf,


Leading the way in IT testing and certification tools, www.certifyme.com
- 113 -

FPS.inf, TS.inf.
Then link the GPO to the domain.
B. Import each template into a separate GPO.350-001 Then link the GPOs to the domain in the following order: WebSrv.inf, FPS.inf,
TS.inf, AllSrv.inf.
C. Create an OU for each server type, and move the computer accounts for that server to
its OU.
Then import the AllSrv.inf template into a GPO.
Then import the template for that server type to its corresponding GPO and link the GPO
to OU.
D. Import the AllSrv.inf template into a GPO and link the GPO to the domain.
Create an OU for each server type, move the computer accounts for that server to its OU.

Then import the template for that server type to its corresponding GPO and link the GPO
to OU.
Answer: C
Explanation: A security template is a text file that contains settings for certain
policies, located under the Computer Configuration/Windows Settings/Security
Settings node in the Group Policy object (GPO) namespace that can be imported
into any Active Directory-based GPO and, thereby, applied to the computers that
are targeted by that GPO.640-802 In this scenario, you should place each type of member
server in a separate OU because each server type must be configured differently.
Since a server role-specific template has to overwrite conflicting settings from the
AllSrv.inf template, you should apply the AllSrv.inf template first. To meet this
requirement, you can create a GPO for each type of server, link it to the
corresponding OU, and import the AllSrv.inf template followed by the server
role-specific template.

Incorrect Answers:
A: If you import all the templates into the same GPO, the settings from the last template
would overwrite the settings that were imported from the other templates.VCP-310 If you link this
GPO to the domain, that hybrid configuration would be applied to all computers in the
domain, including client computers.
B: If you used this option, the settings from the GPO with higher precedence would
overwrite the conflicting settings from lower-priority GPOs, and the resulting uniform
configuration would be applied to all computers, including client computers.
D: If you applied the AllSrv.inf
Leading the way in IT testing and certification tools, www.certifyme.com
- 114 -

template to the domain and applied each server role-specific template to the OU that
contains the corresponding server, all member servers would be configured correctly
because OU-level GPOs would have higher precedence than domain-level GPOs. This
option would, however, affect client computers as well.