Exam AZ-800 topic 1 question 58 discussion

Actual exam question from Microsoft's AZ-800

Question #: 58
Topic #: 1

HOTSPOT
-

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the users shown in the following table.

The domain has the Group Policy Objects (GPOs) shown in the following table.

The GPOs are configured as shown in the following table.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by 6de0f77 at March 3, 2024, 10:06 p.m.

Comments

Submit Cancel

6de0f77

Highly Voted 1 year, 4 months ago

No granular password policies are mentiod. So the Default Domain Policy is leading. In this case minimal password length of 8. So: YES NO NO

upvoted 12 times

[Removed]

1 year, 3 months ago

You're correct. To add to this, only 1 password policy can be in effect for a domain and can only be defined in the default domain policy, or in another GPO linked to the root domain and that would be given precedence. The only way to have multiple is to use fine grained policies.

upvoted 2 times

...

Andmachado

6 months, 3 weeks ago

Guys, I did the following test. I created an OU and a user. I added the user to this OU. I tested it by changing the password to 8 characters in the Default Domain Policy. Soon after, I created a GPO in the new OU, and created a GPO with only the minimum 10 characters. At first it didn't work, but I ran a gpupdate /force, and restarted the computer, and after the restart, it only worked with the 10 characters. So I believe the answer given is correct.

upvoted 2 times

...

Ksk08

Most Recent 8 months ago

YES NO NO

upvoted 2 times

...

starseed

9 months, 2 weeks ago

answer is yes no no

upvoted 1 times

...

Krayzr

12 months ago

YNN should be the answer

upvoted 1 times

...

JimmyC

1 year ago

This question tricked me since I forgot that password policy can only be applied at the root domain level, so I appreciate the other comments indicating that. I just wanted to mention that User3 is also a red herring - password length is a Computer policy, so the fact that User3 resides in an OU where that policy is applied would make no difference unless loopback was enabled. It's a moot point, but important in its own way in case that failed to trip something in your head.

upvoted 1 times

JimmyC

1 year ago

Actually I take back my mention of loopback as well - it works for user policy in a computer OU, not computer policy in a user OU. So forget I mentioned it - computer policy in a user OU would simply never be enforced (unless the user and computer both reside in that same OU).

upvoted 2 times

...