单项选择题
Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.
You need to recommend a Group Policy deployment strategy. Your strategy must support the following requirements：
èDomain-level Group Policy objects （GPOs） must not be overwritten by organizational unit （OU） level GPOs.
èOU-level GPOs must not apply to members of the Server Operators group.
What should you recommend？（）
A.Enable Block Inheritance for the domain，and then modify the permissions of all GPOs linked to OUs.
B.Enable Block Inheritance for the domain， and then enable Loopback Processing policy mode. Add the Server Operators group to the Restricted Groups list.
C.Set all domain level GPOs to Enforced， and then modify the permissions of the GPOs that are linked to OUs.
D.Set all domain level GPOs to Enforced，and then enable Loopback Processing policy mode.Add the server Operators group to the Restricted Groups list.
相关考题
-
单项选择题
Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups èSales èFinance èEngineering You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU. Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue. You need to ensure that the users from the Engineering global group are able to access the Run command on the Start menu. What should you do？（）
A.Configure GPO1 to use the Enforce Policy option.
B.Configure Block Inheritance on the Managers OU.
C.Configure Group Policy filtering on GPO1 for the Engineering global group.
D.Create a new child OU named Engineering under the Employees OU. Move the Engineering global group to the new Engineering child OU. -
单项选择题
Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database. You need to redesign the layout of the OUs to support the following requirements： èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU èMinimize the number of GPOs èMinimize the number of OUs What should you include in your design？（）
A.Create a Starter GPO.
B.Create a Windows Management Instrumentation （WMI） filter.
C.Delegate permissions on the Application OU.
D.Configure block inheritance on the Application OU. -
单项选择题
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements： èEnsures that administrators use complex passwords èMinimizes the number of servers required to support the solution What should you include in your design？（）
A.Implement Network Access Protection （NAP）.
B.Implement Active Directory Rights Management Services （AD RMS）.
C.Create a new Password Settings Object （PSO） for administrator accounts.
D.Create a new child domain in the forest. Move all non-administrator accounts to the new domain.Configure a complex password policy in the root domain.
