Exam 70-744 topic 1 question 25 discussion

Actual exam question from Microsoft's 70-744

Question #: 25
Topic #: 1

HOTSPOT -
You network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Secure that contains all server.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Print Server Security baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropriate options in the answer area.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
http://www.techrepublic.com/blog/it-security/use-ms-security-compliance-manager-to-secure-your-windows-environment/ https://technet.microsoft.com/en-us/library/hh489604.aspx

by Ario at April 5, 2020, 11:29 a.m.

Comments

Submit Cancel

Ario

Highly Voted 5 years, 2 months ago

Correct answer is : GPO Backup (folder) Group Policy Management

upvoted 11 times

...

adasko

Most Recent 4 years, 5 months ago

Deploying security configurations - After you create a baseline, you can export it as a GPO Backup file. You then can import the GPO Backup file, saved in a named GUID folder, such as {6AC1786C-016F-11D2-945F-00C04fB984F9}, into an AD DS GPO by using Group Policy Management Console.

upvoted 1 times

...

4 years, 8 months ago

he question is just vague enough to potentially have more than one right answer depending on how you read it. (pisses me off) Yes GPO Backup (folder) and Group Policy Management will definitely work on domain joined servers, but the question doesn't explicitly specify whether or not Server 2 is domain or workgroup. We can infer that Server 2 is domain joined by the statement about all servers being in the Secure OU. But, if if Server 2 is in a workgroup, Group Policy Management won't work and the given answer is correct... Breakdown, the given answer will work both for domain and workgroup servers. GPO will only work for domain joined servers. So both are correct if domain joined. If workgroup, the given answer is the ONLY correct answer. https://4sysops.com/archives/security-compliance-manager-deploy-baselines/

upvoted 2 times

KidCastaldo

4 years, 8 months ago

Revision... My statement about the given answer is not correct, if in workgroup it would not SCAP v1.0 (.cab), but would be SCM (.cab) and Microsoft SCM.

upvoted 1 times

palermo

4 years, 7 months ago

I think that the question has two valid answers. In the second part stays "what tool" it not mean that you need to have it already on server. For example GPMC is also not present on every server.

upvoted 2 times

expert_ms

4 years, 7 months ago

fair statement

upvoted 1 times

...

morlu

4 years, 8 months ago

Answer is correct. Group Policy Management is for domain level GPO's, you would need to use local group policy. As that's not an option, SCM also has functionality to import GPO's to local policy.

upvoted 2 times