nerdexam
Microsoft

70-647 · Question #73

Your network consists of one Active directory domain. All domain controllers run Windows Server 2008. The network contains both portable and desktop computers. Your company has two departments named…

The correct answer is B. Modify the Default Domain Policy. Create a new GPO for each OU. Every Default Domain Policy setting configured in that GPO apply to every user and computer account in the domain unless these settings are overwritten by other domain GPOs having higher precedence or by GPOs linked to OUs. Therefore, you need to first modify the Default Domain…

Planning and Implementing Security

Question

Your network consists of one Active directory domain. All domain controllers run Windows Server 2008. The network contains both portable and desktop computers. Your company has two departments named Sales and Engineering. You create one organizational unit (OU) for each department. You move all user and computer accounts to their respective OUs. You need to prepare the environment for the deployment of Group Policy objects (GPO) to meet the following requirements:

  • Remote users in the Sales department must be able to save documents

to any USB flash drive.

  • Remote users in the Engineering department must be able to save

documents only to USB flash drives supplied by the company.

  • Local network users from both departments must be able to use a USB

mouse and a USB keyboard. What should you do?

Options

  • ACreate a single GPO for both OUs.
  • BModify the Default Domain Policy. Create a new GPO for each OU.
  • CCreate a new OU for all desktop computers. Create a GPO for the new OU.
  • DModify the Default Domain Controllers Policy. Create a new GPO for each OU.

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    74% (31)
  • C
    7% (3)
  • D
    14% (6)

Explanation

Every Default Domain Policy setting configured in that GPO apply to every user and computer account in the domain unless these settings are overwritten by other domain GPOs having higher precedence or by GPOs linked to OUs. Therefore, you need to first modify the Default Domain Policy to not include any settings except account policies and then create a new GPO for Sales organizational unit (OU) to allow the remote users of the Sales department to save documents to any USB flash drive and a new GPO for Development OU to allow the remote users of Development department to save documents only to USB flash drives supplied by the company. Beside you need to configure both the GPOs to allow the local network users from both the departments to be able to use a USB mouse and a nwithDefaultDomainPolicy.html

Topics

#Group Policy#USB device control#OU structure#department policies

Community Discussion

No community discussion yet for this question.

Full 70-647 Practice