70-686 · Question #108
Your company has an Active Directory Domain Services (AD DS) forest with a single domain. The domain, organizational unit (OU), and Group Policy object (GPO) design is shown in the following…
The correct answer is D. Create a new GPO that has the AppLocker settings, and link it to the NY Computers OU. See the full explanation below for the reasoning.
Question
Your company has an Active Directory Domain Services (AD DS) forest with a single domain. The domain, organizational unit (OU), and Group Policy object (GPO) design is shown in the following diagram. The NY Computers OU contains client computers that run either Windows Vista Enterprise or Windows 7 Enterprise. The New York Computers GPO defines software restriction policies (SRPs). You have the following requirements:
- SRPs must be used for only Windows Vista Enterprise client computers.
- AppLocker policies must be used for only Windows 7 Enterprise client
computers.
- AppLocker policies must be defined by using Group Policy.
You need to design an AppLocker deployment that meets these requirements. What should you do?
Exhibit
Options
- ACreate a new GPO that has the AppLocker settings, and link it to the NY Users OU.
- BDefine the AppLocker settings in the New York Baseline GPO.
- CDefine the AppLocker settings in the New York Users GPO.
- DCreate a new GPO that has the AppLocker settings, and link it to the NY Computers OU.
How the community answered
(35 responses)- A3% (1)
- B6% (2)
- C14% (5)
- D77% (27)
Community Discussion
No community discussion yet for this question.