AZ-800 Question #27: Real Exam Question with Answer & Explanation

Question

Your network contains an Active Directory Domain Services (AD DS) domain. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item level targeting should you use?

Options

• ADomain
• BOperating System
• CSecurity Group
• DEnvironment Variable

Explanation

{"question_number": 5, "question_summary": "Apply GPO preferences only to member servers, not DCs or client computers, using item-level targeting", "correct_answer": "B. Operating System", "explanation": "Operating System item-level targeting allows filtering based on the Windows product type, which distinguishes between Workstation (type 1), Domain Controller (type 2), and Server/Member Server (type 3). By targeting 'Server' product type while excluding 'Domain Controller,' the preference applies only to member servers. This requires no additional group management (unlike Security Group targeting) and applies precisely to the OS role. Domain targeting (A) is too broad, Security Group (C) requires manual group maintenance, and Environment Variable (D) is unrelated to machine role classification.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.