DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2016. The domain contains a member server named Server1.
You test Code Integrity on Server1 in audit mode.
You need to enforce the Code Integrity levels on all the Windows Server 2016 servers in the domain.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
I think answer is wrong. You don’t need a NEW-CIPolicy because “You test Code Integrity on Server1 in audit mode” so policy already exists, but in audit mode. You also must “enforce the Code Integrity levels on all the Windows Server 2016 servers in the domain” – so you need use GPO!
I think correct sequence:
* Set-RuleOptions (Set-RuleOptions -FilePath ….xml -Option 3 -Delete)
* Convertfrom-CIPolicy
* Deploy policy file by GPO (on all the Windows Server 2016 servers in the domain!!!)
* Restart Servers
link:
https://docs.microsoft.com/ru-ru/archive/blogs/datacentersecurity/default-code-integrity-policy-for-windows-server