A program manager wants to ensure contract employees can only use the company's computers Monday through Friday from 9 a.m. to 5 p.m. Which of the following would best enforce this access control?

The correct answer is A. Creating a GPO for all contract employees and setting time-of-day log-in restrictions. The most appropriate method is to use a Group Policy Object (GPO) with time-of-day restrictions. This is a native capability in Windows environments that allows administrators to control when users are allowed to log in to domain-joined systems.

Submitted by weili_xi· Mar 6, 2026Security program management and oversight

Question

Options

ACreating a GPO for all contract employees and setting time-of-day log-in restrictions
BCreating a discretionary access policy and setting rule-based access for contract employees
CImplementing an OAuth server and then setting least privilege for contract employees
DImplementing SAML with federation to the contract employees' authentication server

How the community answered

(68 responses)

A
78% (53)
B
13% (9)
C
3% (2)
D
6% (4)

Explanation

The most appropriate method is to use a Group Policy Object (GPO) with time-of-day restrictions. This is a native capability in Windows environments that allows administrators to control when users are allowed to log in to domain-joined systems.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice