Exam 70-411 topic 2 question 119 discussion

Actual exam question from Microsoft's 70-411

Question #: 119
Topic #: 2

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1.
You create and link a Group Policy object (GPO) named GPO1 to OU1.
You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.
What should you configure?

A. Security Filtering.
B. WMI Filtering.
C. Block Inheritance.
D. Item-level targeting.

Show Suggested Answer

Suggested Answer: D 🗳️
You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group
Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.
Reference: https://technet.microsoft.com/en-us/library/cc733022.aspx

by benynek at Nov. 20, 2019, 7:36 a.m.

Comments

Submit Cancel

mariodesa

4 years, 3 months ago

D is correct. You cannot deny access through the security filter. Only through the Delegation.

upvoted 1 times

...

ZUMY

4 years, 3 months ago

A correct

upvoted 1 times

...

TechExams

5 years, 4 months ago

benynek is right! This is to prevent the entire GPO from applying, not individual preferences. Should be "A". Correct Answer: A. Security Filtering.

upvoted 3 times

...

benynek

5 years, 5 months ago

I would use the Security Filtering to deny the GPO to apply on my user or a group. "A"

upvoted 4 times

...

Exam 70-411 All Questions

View all questions & answers for the 70-411 exam