Homework answers / question archive / Knowledge Assessment Lesson 6        Multiple Choice Select one or more correct answers for each of the following questions

Knowledge Assessment Lesson 6        Multiple Choice Select one or more correct answers for each of the following questions

Computer Science

Share With

---

Select one or more correct answers for each of the following questions.

1)       Which of the following software restriction policy rule types takes the highest precedence?

a.       Certificate rules

b.       Hash rules

c.        Default rules

d.       Zone rules

2.       Which of the following types of rules can be manually created in AppLocker?

a.       Publisher rules

b.       Certificate rules

c.        Path rules

d.       File hash rules

3.       Which of the following Windows versions support AppLocker policies? (Choose all that apply.)

a.       Windows 8.1

b.       Windows Vista

c.        Windows Server 2003

d.       Windows Server 2008 SP2

4.       When you enable the Prevent installation of removable devices policy in a GPO and link that GPO to a domain, what is the effect on the devices already installed on computers in that domain?

a.       The policy has no effect on removable devices that have already been installed.

b.       The policy causes already installed removable devices to be uninstalled.

c.        The policy allows already installed removable devices to function, but prevents their drivers from being updated.

d.       The policy disables already installed removable devices, but does not uninstall them.

5.             Which of the following rule types cannot be used to create software restriction policies?

a.       hash rules

b.       certificate rules

c.        path rules

d.       code rules

6.             When creating an AppLocker rules manually, which of the following is NOT information the wizard prompts you to supply?

a.       Conditions

b.       User or group

c.        Function

d.       Action

7.             Which of the following is NOT a setting for software restriction policies?

a.       Basic user

b.       Disallowed

c.        Advanced user

d.       Unrestricted

Choose the letter that corresponds to the best answer. More than one answer choice may achieve the goal. Select the BEST answer.

1.       Which of the following statements is the primary reason why AppLocker is an improvement over software restriction policies?

1. AppLocker has more rule types than software restriction policies.
2. AppLocker can generate its own rules automatically.
3. AppLocker can be deployed in Group Policy objects in Active Directory.
4.  AppLocker requires the Application Identity service to be running.

2. Which of the following statements is the primary reason why you must start the Application Identity service manually before using AppLocker?

1. Because AppLocker needs the Application Identity service to be running in order to function.
2. Because the Application Identity service will hang the system if it starts with Windows.
3. Because requiring the manual start prevents improperly configured AppLocker rules from permanently hanging the system.
4. Because Windows 8.1 does not support starting the Application Identity service automatically.

1.       Complete the following exercise by matching the terms with their corresponding definitions.

           a)       Path rules

           b)       Windows Installer Rules

           c)       Certificate rules

           d)       Executable Rules

           e)       Hash rules

           f)        Packaged app Rules

           g)       default rule

           h)       Network zone rules

           i)        Script Rules

           j)        DLL rules

1. Applies to files with .exe and .com extensions
2. Applies to packages with .msi and .msp extensions
3. Applies to files with .ps1, .bat, .cmd, .vbs, and .js extensions
4. Applies to Windows Store purchases
5. Applies to digitally signed applications
6. Applies to applications with a digital fingerprint
7. Applies to packages downloaded with Internet Explorer
8. Applies to applications with a specific file or folder name
9. Applies to libraries, as well as executables
10. Applies to applications that do not match any other rule type