A. Push a group policy

Avoid interrupting ANY users, referencing EVERY employee, so of course the owner of this website feels that we should do ONE local policy for ONE user at ONE machine. Of course this makes perfect sense, instead of pushing out a group policy update for EVERY user, which disables USB access, which is what the question is asking about..... But hey, what can I say, this stupid horse-fucking website must be wrong...errr...I mean RIGHT.....again like always!!

even chatgpt say's A.

On a standalone workstation, security policies for the local machine and for localaccounts are configured via the Local Security Policy or Local Group Policy snap-in.In an AD domain, they can be configured via Group Policy Objects (GPOs). GPOs are ameans of applying security settings (as well as other administrative settings) across arange of computers and users. per the offical comptia study guide that was purchased from their site.

You try other websites guys. Still the answer is B. It's what Comptia wants.

Assign a policy to a group. Policy assignment to groups lets you assign a policy to a group of users, such as a security group or distribution list. so you have a group policy in place you can then assign a security policy within the group policy.

Local security policy overwrites domain policy, so I think the answer is correct.

CompTIA A+ 220-1002 – Question42 After a virus has been spread unknowingly via USB removable hard drives, a technician is tasked with limiting removable hard drive access to certain network users. USB ports are used for many devices, including scanners, printers, and signature pads, so a policy is created to deny access to removable hard drives only. When testing the policy, a removable drive is plugged in but can still be accessed. Which of the following command-line tools should the technician use to apply the new policy? A. grupdate B. diskpart C. gpresult D. net use Show Answer Hide Answer Correct Answer: A https://comptiaexamtest.com/A+220-1002/comptia-a-220-1002-question42/

Topic 2 = garbage answers

I agree, It should be Group Policy because then you don't have to spend time logging on to every person's computer or remoting in which depending on the setup could take up more time and bother employees.