ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam
Go to Exam

Exam 70-742 topic 1 question 99 discussion

Actual exam question from Microsoft's 70-742
Question #: 99
Topic #: 1
[All 70-742 Questions]

Your network contains an Active Directory domain named contoso.com.
You create a domain security group named Group1 and add several users to it.
You need to force all of the users in Group1 to change their password every 35 days. The solution must affect the Group1 users only.
What should you do?

  • A. Create a forms authentication provider, and then set the forms authentication credentials.
  • B. From Active Directory Administrative Center, create a Password Setting object (PSO).
  • C. Modify the Password Policy settings in a Group Policy object (GPO) that is linked to the domain, and then filter the GPO to Group1 only.
  • D. From Windows PowerShell, run the Set-ADDomain cmdlet, and then run the Set-ADAccountPassword cmdlet.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by TMW at Aug. 27, 2019, 8:06 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
TMW
Highly Voted 5 years, 10 months ago
Yep, this is a PSO (password settings object) question. This can be accomplished either using the Active Directory Administrative Center, or Powershell. This one is a really good one to look up, it is one of the exam objectives, and we WILL be asked about it on the exam.
upvoted 5 times
...
coleman
Highly Voted 5 years, 6 months ago
right,the answer is B. From Active Directory Administrative Center, create a Password Setting object (PSO).
upvoted 5 times
...
syougun200x
Most Recent 4 years, 5 months ago
Wonder why C is not a good answer here. Is this because the filtering is not applied to only password setting but includes all the other categories??
upvoted 1 times
...
yesboet
4 years, 7 months ago
B is correct
upvoted 1 times
...
promaster
4 years, 9 months ago
B and C (Security filtering can apply to groups, users, and computers)
upvoted 1 times
...
AZ764
5 years, 2 months ago
Couldn't both B AND C be correct? Why wouldn't you be able to use a GPO here?
upvoted 1 times
Justin0020
5 years, 1 month ago
This is because a GPO cannot be applied to a group. Only to an OU.
upvoted 7 times
bake73
4 years, 11 months ago
Not trough item level targeting
upvoted 1 times
SmackedWookiee
4 years, 10 months ago
But it's more efficient and easier to manage to do it by creating a PSO.
upvoted 2 times
...
...
...
VeiN
4 years, 9 months ago
the setting in GPO is set in Default Domain Policy and it works of everyone. You cant change to have different versions - only one for whole domain.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel