Security Templates/Configuration for exam

Ally77

Hi,
i would be grateful for any help on this topic. I am looking to sit 70-290 soon but seem to have some kind of memory block when it comes to the security. For example, i become confused when trying to understand the default domain and the default domain controller policies and how they are applied. Therefore i would be grateful for any good links etc that will help clear this up for me!

Thanks in advance