SC-100 · Question #74
Your company has devices that run either Windows 10, Windows 11, or Windows Server. You are in the process of improving the security posture of the devices. You plan to use security baselines from…
The correct answer is B. Policy Analyzer. Policy Analyzer is the correct tool because it is specifically included in the Microsoft Security Compliance Toolkit (SCT) for the purpose of comparing Group Policy Objects (GPOs) against security baselines. It allows administrators to import baseline files and local/domain…
Question
Your company has devices that run either Windows 10, Windows 11, or Windows Server. You are in the process of improving the security posture of the devices. You plan to use security baselines from the Microsoft Security Compliance Toolkit. What should you recommend using to compare the baselines to the current device configurations?
Options
- AMicrosoft Intune
- BPolicy Analyzer
- CLocal Group Policy Object (LGPO)
- DWindows Autopilot
How the community answered
(41 responses)- A2% (1)
- B88% (36)
- C2% (1)
- D7% (3)
Explanation
Policy Analyzer is the correct tool because it is specifically included in the Microsoft Security Compliance Toolkit (SCT) for the purpose of comparing Group Policy Objects (GPOs) against security baselines. It allows administrators to import baseline files and local/domain GPOs side by side, highlighting differences and conflicts. Microsoft Intune (A) manages device configuration policies in modern management scenarios but is not a baseline comparison tool from the SCT. LGPO (C) is a command-line utility in the SCT used to apply or export local GPO settings, not to compare them. Windows Autopilot (D) is a deployment technology for provisioning devices and is unrelated to baseline comparison.
Topics
Community Discussion
No community discussion yet for this question.