ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 58 - AZ-800 discussion

Report
Export

You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege. To which group should you add the administrator?

A.
AAD DC Administrators
Answers
A.
AAD DC Administrators
B.
Domain Admins
Answers
B.
Domain Admins
C.
Schema Admins
Answers
C.
Schema Admins
D.
Enterprise Admins
Answers
D.
Enterprise Admins
E.
Group Policy Creator Owners
Answers
E.
Group Policy Creator Owners
Suggested answer: B

Explanation:

Only the Domain Admins group and the Enterprise Admins group can fully manage GPOs. Members of the Group Policy Creator Owners group can create new GPOs but they can't link the GPOs to sites, the domain or OUs and they cannot manage existing GPOs.

asked 02/10/2024
Michael Madamba
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first