350-001 testking, 640-802 dumps and VCP-310

You need to design a solution to address the concern of the Chief Security officer
regarding the installation of unauthorized software on domain computers.

What should you do? (Each correct answer presents a complete solution. Choose
TWO.)

A. Disable the Disable Windows Installer policy in the Default Domain GPO.
B. Enable the Disable Windows Installer policy and select the For non-managed apps
only setting in the Default Domain GPO.
C. Enable the Disable Windows Installer policy and select the Never setting in the
Default Domain GPO.350-001
D. Enable the Disable Windows Installer policy and select the Always setting in the
Default Domain GPO.
E. Configure software restriction policy at domain level by creating the appropriate rules.
Answer: B, E
Explanation: Enabling the Disable Windows Installer policy and selecting the For
non-managed apps only setting in the Default Domain GPO will ensure that only
administrator approved applications will be installed.640-802
You can also control the software deployment by means of configuring a software
restriction policy at domain level.
1. No unauthorized software must be installed on any of the computers on the Willow
Bridge, Ltd. network.
2. We must also ensure that our users do not install unauthorized software on the
company client computers."

Incorrect answers:
A: If you disable the Disable Windows Installer policy because it will allow any
application to be installed.
C: Selecting the Never setting on the Disable Windows Installer policy on the Default
Domain GPO will prevent the installation of any applications, but will also prevent the VCP-310
administrator-approved applications from being installed.
D: Selecting the Always setting on the Disable Windows Installer policy on the Default
Domain GPO will prevent the installation of any applications, but will also prevent the
administrator-approved applications from being installed.