Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains the user accounts and the computer accounts for
laptops and desktop computers. A Group Policy object (GPO) named GP1 is linked to OU1. You need
to ensure that the configuration settings in GP1 are applied only to the laptops in OU1. The solution
must ensure that GP1 is applied automatically to new laptops that are added to OU1.
What should you do?
A.
Modify the GPO Status of GP1.
B.
Configure the WMI Filter of GP1.
C.
Modify the security settings of GP1.
D.
Modify the security settings of OU1.
Shouldn’t the answer be A?
Never mind. I read the question wrong .
This is the third of fourth time this question has come up. on one question, the answer provided as being correct was to use the GPO status to disable user settings, in another question, the answer given as the correct answer was to use group policy loopback processing. And now it is telling us that the WMI filtering is the correct answer.
Of the 3 answers this site provides as the “correct” answer, the only one that makes any sense is to use the GPO status to disable user settings, but even that seems silly, why set user settings in the first place if you are just going to disable them. To me the correct answer is never listed in any of these, and that would be to use Security Filtering.
In any case, the only answer that has been present in the options every time this question has come up, and makes any sense whatsoever is GPO Status, so I will go with GPO status on the test.
Actually, thinking about it even further, why are users and computers in the same OU anyway. The real answer to this question would be to create a second OU, Users1, and move all users out of OU1 and put them in Users1.
is there any way of getting these questions all on one file?
No, those questions aren’t the same. They’re structured similarly but they all ask different things.
For example the one with the correct answer being “disable user settings” asked what to do to make the gpo apply only to computers.
I believe the given answer (B. – WMI Filter) is actually the correct answer.
The question states “You need to ensure that the configuration settings in GP1 are applied **only to the laptops** in OU1”, but OU1 contains both laptops and desktops (along with user accounts).
WMI filtering can be used to filter out computers that don’t meet your criteria, and you can base that criteria on things like hardware (e.g. CPU type – mobile processor vs. desktop processor).
Modifying the GPO status of GP1 would allow you to disable the User configuration settings, but the Computer configuration settings would still be applied to ALL computers.