QuestionQ183

Managing System Security

Mark is a Network Administrator at NetTech Inc. The company has a Windows 2003 Active Directory domain-based network. The domain includes two Windows 2003 member servers and 500 Windows XP Professional client computers. The member servers operate as file servers. All member servers are in an OU named MEMSERV. Mark wants to test IPsec interoperability on the network. To do this, he creates a GPO named EXP. In the EXP GPO, he creates an IPsec policy named IPTEST. The IPTEST policy includes a rule specifying Encapsulating Security Payload (ESP) with null encryption.

The IPTEST policy is applied to the member servers by linking the EXP GPO to the MEMSERV OU. After testing IPsec interoperability, Mark wants to ensure the member servers no longer use the IPTEST policy. What should he do to accomplish this task?

  • A Run the REMOVEPOL command on all the member servers.
  • B Unassign the IPTEST policy in the EXP Group Policy object.
  • C Delete the IPTEST policy in the EXP Group Policy object.
  • D Reset the IPTEST policy in the EXP Group Policy object.
Explanation

An IPsec policy becomes active for computers receiving a GPO only when that policy is assigned in the GPO. Unassigning IPTEST in the EXP GPO removes the active policy assignment, so the member servers no longer apply it while the policy remains available in the GPO.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!