Exam AZ-800 topic 4 question 38 discussion

The best choice here is C. Group Policy Objects (GPOs). This option allows you to deploy firewall rules efficiently across all servers in the domain with minimal manual intervention. GPOs are specifically designed for such tasks within an AD environment.

Group Policy allows you to centralize the management of the settings of the computers in your Active Directory Domain Services (AD DS) domain. By using Group Policy Objects (GPOs), you can apply inbound firewall rules to multiple servers at once, regardless of their operating system version. This makes it a more efficient choice compared to the other options. Please note that while PowerShell Desired State Configuration (DSC) and Microsoft Intune configuration profiles can also be used to manage settings, they might require more administrative effort compared to GPOs. Local security objects, on the other hand, would need to be configured individually on each server, which could be time-consuming. Therefore, GPOs would be the most efficient choice in this scenario.

To deploy inbound firewall rules to the servers while minimizing administrative effort, you should use Group Policy Objects (GPOs). GPOs allow centralized management of multiple servers within an Active Directory Domain Services domain, making it efficient to configure and enforce firewall rules across your network infrastructure. This approach is more streamlined than configuring each server individually using local security objects or other methods.