Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 200 Group Policy objects (GPOs).
An administrator named Admin1 must be able to add new WMI filters from the Group Policy
Management Console (GPMC).
You need to delegate the required permissions to Admin1. The solution must minimize the number
of permissions assigned to Admin1.
What should you do?
A.
From Active Directory Users and Computers, add Admin1 to the
WinRMRemoteWMIUsers__group.
B.
From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.
C.
From Active Directory Users and Computers, add Admin1 to the Domain Admins group.
D.
From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.
Another wrong answer and big fight:
http://www.aiotestking.com/microsoft/you-need-to-delegate-the-required-permissions-to-admin1/
Answer is B. Least pemissions to create new WMI filters.
In this case I agree too. It’s B
Thanks Jeff
HERE WE HAVE 2 QUESTIONS LOOK LIKE:
1.”An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI filters from the Group Policy Management Console (GPMC).” – D
2. “An administrator named Admin1 must be able to add new WMI filters from the Group Policy Management Console (GPMC).” – B
THIS CASE b
D is correct,
Full control is required to add new WMI Filters
Ref: https://books.google.ca/books?id=_Zt6BAAAQBAJ&pg=PT318&lpg=PT318&dq=Full+Control+permissions+on+a+WMI+filter&source=bl&ots=WMsV2ngMz2&sig=_4NAW-gX3zTa84vg2bny_pTG8tw&hl=en&sa=X&ved=0ahUKEwiyg82AxOvOAhUCkh4KHZcCA78Q6AEIPTAI#v=onepage&q=Full%20Control%20permissions%20on%20a%20WMI%20filter&f=false
Tested in my Lab. ‘B’ works and is the easiest, least rights route.
B is correct
B is the best answer. It provides the ability to create WMI Filters, and provides less rights than Full Control.