You administer Windows 8.1 Enterprise client computers in your company network.
You change settings on a reference computer by using the Windows Firewall with Advanced Security tool. You want to apply the same settings to other computers.
You need to save the Windows Firewall with Advanced Security configuration settings from the reference computer. You also need to be able to import the configuration settings into a Group Policy object later.
What should you do?
A. Run the netshadvfirewall export c:settings.xml command.
B. Open Local Group Policy Editor, select the Windows Firewall with Advanced Security node, and then select the Export Policy action.
C. Open Local Group Policy Editor, select the Security Settings node, and then select the Export List action.
D. From Control Panel, open Windows Firewall, click Advanced Settings, and then select the Export Policy action.
Correct Answer: D
Explanation/Reference:
The export netsh file format is wfw, not .xml .
Also, the export works just fine from the "Advanced Settings", which actually launches the full fledged Windows Firewall with Advanced Security:
Explanation:
http://www.howtogeek.com/100409/group-policy-geek-how-to-control-the-windows-firewall-with-a-gpo/ Group Policy Geek: How to Control the Windows Firewall With a GPO
…
Exporting the Policy
To export the policy, in the left hand pane click on the root of the tree which says Windows Firewall with Advanced Security. Then click on Action and select Export Policy from the Menu
You should save this to either a network share, or even a USB if you have physical access to your server. We will go with a network share.
Importing the Policy Into Group Policy
….
To import the firewall policy you need to open an existing GPO or create a new GPO and link it to an OU that contains computer accounts
..
Now navigate to:
Open Computer ConfigurationPoliciesWindows SettingsSecurity SettingsWindows Firewall with Advanced Security Click on Windows Firewall with Advanced Security and then click on Action and Import Policy
You will be told that if you import the policy it will overwrite all existing settings, click yes to continue and then browse for the policy that you exported in the previous section of this article. Once the policy has finished being Imported you will be notified.
…
Further Information:
http://technet.microsoft.com/en-us/library/cc771920%28v=ws.10%29.aspx Netsh Commands for Windows Firewall with Advanced Security
Netsh advfirewall is a command-line tool for Windows Firewall with Advanced Security that helps with the creation, administration, and monitoring of Windows Firewall and IPsec settings and provides an alternative to console-based management.
..
To start the advfirewall context at an elevated command prompt, type netsh, press ENTER, then type advfirewall and press ENTER.
..
export
Exports the Windows Firewall with Advanced Security configuration in the current store to a file. This file can be used with the import command to restore the Windows Firewall with Advanced Security service configuration to a store on the same or to a different computer. The Windows Firewall with Advanced Security configuration on which the export command works is determined by the set store command. This command is the equivalent to the Export Policy command in the Windows Firewall with Advanced Security MMC snap-in.
Syntax
export [ Path ] FileName
Parameters
[ Path ] FileName
Required. Specifies, by name, the file where the Windows Firewall with Advanced Security configuration will be written. If the path, file name, or both contain spaces, quotation marks must be used. If you do not specify Path then the command places the file in your current folder. The recommended file name extension is .wfw.
