You need to test the new AppLocker Packaged Apps policy…

You support Windows 10 Enterprise computers that are members of an Active Directory domain.
Your company policy defines the list of approved Windows Store apps that are allowed for
download and installation. You have created a new AppLocker Packaged Apps policy to help
enforce the company policy. You need to test the new AppLocker Packaged Apps policy before
you implement it for the entire company. What should you do?

You support Windows 10 Enterprise computers that are members of an Active Directory domain.
Your company policy defines the list of approved Windows Store apps that are allowed for
download and installation. You have created a new AppLocker Packaged Apps policy to help
enforce the company policy. You need to test the new AppLocker Packaged Apps policy before
you implement it for the entire company. What should you do?

A.
From Group Policy, enforce the new AppLocker policy in Audit Only mode.

B.
From Group Policy, run the Group Policy Results Wizard.

C.
From Group Policy, run the Group Policy Modeling Wizard.

D.
From PowerShell, run the Get-AppLockerPolicy -effective command to retrieve the AppLocker effective policy.

Explanation:
You can test an AppLocker Packaged Apps policy by running it in audit mode. After AppLocker
rules are created within the rule collection, you can configure the enforcement setting to Enforce
rules or Audit only. When AppLocker policy enforcement is set to Enforce rules, rules are enforced
for the rule collection and all events are audited. When AppLocker policy enforcement is set to
Audit only, rules are only evaluated but all events generated from that evaluation are written to the
AppLocker log.
Incorrect Answers:
B: The Group Policy Results Wizard is used to determine which group policy settings are applied
to a user or computer object and the net results when multiple group policies are applied. The
Group Policy Results Wizard is not used to test an AppLocker Packaged Apps policy.
C: The Group Policy Modeling Wizard calculates the simulated net effect of group policies. Group
Policy Modeling can also simulate such things as security group membership, WMI filter evaluation,
and the effects of moving user or computer objects to a different Active Directory container. The
Group Policy Modeling Wizard is not used to test an AppLocker Packaged Apps policy.
D: The Get-AppLockerPolicy -Effective command returns the effective AppLocker policy on the
local computer. The effective policy is the merge of the local AppLocker policy and any applied
domain policies on the local computer. The Get-AppLockerPolicy -effective command is not used
to test an AppLocker Packaged Apps policy.
https://technet.microsoft.com/en-us/library/ee791796(v=ws.10).aspx



Leave a Reply 1

Your email address will not be published. Required fields are marked *


Dan Hatton

Dan Hatton

Congrats!!! Finally Passed The Configuring Windows Devices 70-697 Exam Last Week!!! Scored 883/1000.

I studied for around 50 days before taking the 70-697 test. The 70-697 exam a little difficult, the actual 70-697 questions were pretty straight forward.

Working experience about SYS Admin will help a lot for passing the 70-697 test!

I had 51 questions in total, mainly on App-V, Remote Apps, Intune reports and Azure, Networks (profiles), Workfolders…etc.

Got many new questions on Understanding the Application Compatibility in Your Environment, AppLocker, Setting Disk Quotas, Fsutil quota and so on.

And, I do recommend you to learn the PassLeader 70-697 dumps for preparing for the test, most of all new questions are available in PL!

Here, you can get part of PassLeader 70-697 dumps here FYI:

https://drive.google.com/open?id=0B-ob6L_QjGLpd0pjaGx0bzVXVG8

Good Luck!!!