Your network contains an Active Directory domain named contoso.com. All of the AppLocker policy settings forthe member servers are configured in a Group Policy object (GPO) named GPO1.
A member server named Server1 runs Windows Server 2012 R2.
On Server1, you test a new set of AppLocker policy settings by using a local computer policy. You need to
merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1.
What should you do?
A.
From Local Group Policy Editor on Server1, export an .inf file. Import the .inf file by using Group Policy
Management Editor.
B.
From Server1, run the Set-ApplockerPolicycmdlet.
C.
From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by using Group Policy
Management Editor.
D.
From Server1, run the New-ApplockerPolicycmdlet.
Explanation:
The Set-AppLockerPolicy cmdlet sets the specified Group Policy Object (GPO) to contain the specified
AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) is specified, the local GPO is the default.
When the Merge parameter is used, rules in the specified AppLocker policy will be merged with the AppLocker
rules in the target GPO specified in the LDAP path. The merging of policies will remove rules with duplicate rule
IDs, and the enforcement setting specified by the AppLocker policy in the target GPO will be preserved. If the
Merge parameter is not specified, then the new policy will overwrite the existing policy.http://technet.microsoft.com/en-us/library/ee791816(v=ws.10).aspx Exam Ref 70-410: Installing and configuring
Windows Server 2012 R2, Chapter 10:
Implementing Group Policy, Lesson1: Planning, Implementing and managing Group Policy, p.
The Set-AppLockerPolicy cmdlet has a merge parameter.
The Set-AppLockerPolicy cmdlet sets the specified GPO to contain the specified AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) path is specified, the local GPO is the default setting. If the Merge parameter is not specified, the existing AppLocker policy in the target GPO will be overwritten by the new policy.