Your network consists of a single Active Directory domain.
The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2.
A corporate security policy requires complex passwords for user accounts that have administrator privileges.
You need to design a strategy that meets the following requirements:
Ensures that administrators use complex passwords
Minimizes the number of servers required to supportthe solution
What should you include in your design?
A.
Implement Network Access Protection (NAP).
B.
Implement Active Directory Rights Management Services (AD RMS).
C.
Create a new Password Settings Object (PSO) for administrator accounts.
D.
Create a new child domain in the forest. Move allnonadministrator accounts to the new domain. Configure
a complex password policy in the root domain.
Explanation:
AD DS FINE-GRAINED PASSWORD POLICY
You can use fine-grained password policies to specify multiple password policies within a single domain. You
can use fine-grained password policies to apply different restrictions for password and account lockout policies
to different GROUPS/USERS (instead of organizational unit) in a domain.
http://technet.microsoft.com/en-us/library/cc754461.aspx