Exam 70-744 topic 1 question 61 discussion

Actual exam question from Microsoft's 70-744

Question #: 61
Topic #: 1

DRAG DROP -
You have two servers named Server1 and Server2 that run Windows Server 2016. The servers are in a workgroup.
You need to create a security template that contains the security settings of Server1 and to apply the template to Server2. The solution must minimize administrative effort.
Which snap-in should you use for each server? To answer, drag the appropriate snap-ins to the correct servers. Each snap-in may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

References:
https://www.windows-server-2012-r2.com/security-templates.html

by Kamikazekiller at Aug. 8, 2020, 8:47 p.m.

Comments

Submit Cancel

JustM0

4 years, 5 months ago

The answer is correct. There is an option to save the template as a .inf file in the Security Templates Snap-in.

upvoted 2 times

VeiN

4 years, 5 months ago

But you won`t copy the existing settings in GPO, you`ll need to manually set every setting from GPO in the templete and then it`s not but "minimal effort" as it`s stated in the question. Just check in the lab don`t guess.

upvoted 1 times

...

VeiN

4 years, 5 months ago

The question states: "You need to create a SECURITY TEMPLATE that contains the security settings of Server1 (...) The solution must minimize administrative effort." "Each snap-in may be used once, MORE THAN ONCE, or not at all." The answer : On server 1 use GPO snapin to export Security settings, they will be exported to TEMPLETS in *.inf format On Server 2 us GPO snapin to impot templete from server 1. You can easly check it on you windows machine, no need of any fancy lab.

upvoted 1 times

...

SamsOtro

4 years, 7 months ago

Would go with Secpol.msc and inf export if it was an option, but it is not.

upvoted 1 times

...

SamsOtro

4 years, 7 months ago

Answer is correct.

upvoted 3 times

...

expert_ms

4 years, 7 months ago

No. "You need to create a security template that contains the security settings of Server1". Security templates allows you to create template from scratch, but you need export existing security policies, so in first it will be Local Group Policy (export to .inf file)

upvoted 3 times

palermo

4 years, 7 months ago

Correct, the fates way is to export inf from Server1 using local group policy and using the same snap in import it to Server2

upvoted 3 times

...

Kamikazekiller

4 years, 10 months ago

Correct.

upvoted 3 times

...