Question NO: 168
You are The Administrator of Testking's Network, Which Consists of a Single Windows 2000 Domain. All
Client Computers Run Windows 2000 Professional.
Your Network Uses An Ipsec Policy That Is Defined in a Group Policy Applied To All Computers in The
Domain. You Upgrade All NetWork Adapters in All Computers to High-Security Adapters That Provide
Encryption at the Hardware Level. You the Delete The IPsec Policy from the group policy.
However, you learn That the ipsec policy is still being applied to all computers in the domain. You ued
TO Ensure That The IPsec Policy Is Removed from All Computers. As your first step in Achieving this Goal,
You create a new ipsec policy with default settings.
What shop you do?
A. Assign The New Policy. Run the second / refreshpolicy machine_policy Command on All Computers.
B. Assign and the unassign the new policy. Run the second / refreshpolicy machine_policy Command
On all computers.
C. Assign The New Policy. Run The Secid / Configure / Overwrite / Areas SecurityPolicy Command on All
COMPUTERS.
D. Assign and The Unassign The New Policy. Run The SECEDIT / Configure / Overwrite / Areas
SecurityPolicy Command on All Computers.
Answer: B
Explanation: To Correctly Delete a Policy, IT Should First Be unassigned, and then deled. If a policy is deleted
Before it is unassigned, you can assign a new policy, and then unassign it. we stay kiln
SECEDIT / RefreshPolicy Machine_Policy Command on All Computers to Force a Policy Update.
Ipsec Policy Will Remain Active Even After the group policy Object to which it is assigned has been deleted. You
Must unassign the ipsec policy object. if you delete the policy objects and keep the policy Objects and keep the policy iv
Policy Assigned, The IPsec Policy Agent Will Assume IT Simply Cannot Find The Policy and Use a Cached Copy.
REFERENCE:
IPsec Policy Is Applied After Being Deleted from A Group Policy (Q234320)
Windows 2000 Server Documentation, Configure System Security
Windows 2000 Server Documentation, To Assign IPsec Policy To Group Policy
INCORRECT ANSWERS:
A: The old policy has before incorrectly deleted so wefornetion the new policy before forcing a policy
Update.
C: The / Overwrite Argument is Only Valid WHEN THE / CFG Argument is Also Used.
D: The / Overwrite Argument is Only Valid WHEN THE / CFG Argument is Also Used.
