HOTSPOT - What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Suggested Answer:
Box 1: 9 - When multiple PSOs apply to a user, the PSO with the highest precedence (lowest precedence number) applies which in this case is PSO1.
Box 2: 8 - There are no PSOs applied to Admin1 so the password policy from the Default Domain GPO applies. The Minimum password length setting in GPO1 would only apply to local user accounts on computers in OU1. It does not apply to domain user accounts.
User1 - 9
Admin1 - 8
The Default Domain policy in this scenario takes precedence over the GPO. If GPOs are set at any level below the domain level in Active Directory Domain Services (AD DS), they affect only LOCAL ACCOUNTS on member servers.
FGPPs (PSOs) can be used to specify password policies that affect DOMAIN USERS within the domain, taking precedence over any domain level policies.
Answer is correct
Admin1 falls under Default Domain for the password policy and User1 has fine grain password policy applied to it. Lower precedence takes priority.
User1 - 9
Admin1 - 8
The answer is 9 and 8.
The GPO applies to computers (not users) so when Admin1 is logging on a computer that belongs to OU1, he will be forced to use at least a 10 character long password. That would not apply to any computer which is not in that OU.
For user1, it's just a matter of precedence - lowest number, highest precedence - in this case, PSO1 has a lower number so it takes precedence over PSO2.
Admin1 - 8
User1 -9 (precedence 10 take priority over 20)
"Each PSO must have a precedence index number. PSOs with a higher precedence index, like 1, take priority over those with a lower precedence index, like 10"
LSDOU is an acronym used when applying GPO's which means local, site, Domain and OU.
The last GPO setting always wins which is applied to OU. so the admin1 falls under OU. so the minimum password length will be 10.
Tested this in an test environment:
Default Domain Policy: Minimum password length: 9
Password Policy GPO: Minimum password length: 10
Logged in with administrator account -> rsop.msc -> Minimum password length: 10
So the right answer must be:
User1: 9
Admin1: 10
Not true.
Please check how the precedence works.
"Each PSO must have a precedence index number. PSOs with a higher precedence index, like 1, take priority over those with a lower precedence index, like 10"
Admin1 - 8
User1 -9 (precedence 10 takes priority over 20)
User1: 9 (PSO2 will be alppied first and then the PSO1 - Lowest Precedence is on top of list, and applied last)
Admin1: 10 (Default Domain Policy will be applied first and then the GPO1 - FLow: Local, Site, Domain, OU)
The given answer is correct
https://blogs.manageengine.com/corporate/general/2017/01/13/microsoft-password-policies-gpo-based-vs-fine-grained-policies.html#:~:text=There%20can%20be%20only%20one%20password%20policy%20if%20you%20use,users%20located%20in%20that%20OU.
Sorry my mistake- its 8 and 10- The Admin account is in an OU - THE USER ACCOUNT is - this means the GPO will apply as the more specific GPO will apply to the domain account in its OU- the prescedence from top to bottom works for PSE but not policies- the policy rule is the one closed to the obect gets applied last- the GPO says the password policy is a 10 Character password- so 8 and 10
The Answers should be 9 and 8. The GPO1 Policy applied to OU1- User1,3 and admin1- but some users have he PSO- so they may be different- the Admin user is not impacted by the PSo SO - THE Gpo applies - it says local nowhere- Admin is 10 so 9 and 10
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.AZ-801 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TakingExams_Forever
Highly Voted 1 year, 4 months agosyu31svc
Highly Voted 12 months agoEscaruncho
Most Recent 1 month, 2 weeks agoBlackCat9588
2 months, 2 weeks agophi3nix
10 months, 1 week agotanoj
11 months, 3 weeks agokijken
1 year, 1 month agoRickerttt
1 year, 1 month agophi3nix
10 months, 1 week agoVerdural
1 year, 1 month agoOluDim
1 year, 3 months agoLeocan
1 year, 4 months agojoehoesofat
1 year, 4 months agojoehoesofat
1 year, 4 months ago