Exam AZ-800 topic 1 question 6 discussion

AAD DC Administrators Modifying AADDC Computers GPO https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy The GPO can be linked on UO not to the domain

bad: 1 ok but 2 creating a new GPO

Asnwer: 1. AAD DC Administrators 2. Create a new GPO linked to domain 1. This is the required group for managing Group Policy in Azure AD DS. 2. While you can modify the built-in GPOs (AADDC Users and AADDC Computers), creating a custom GPO provides better management and control and is the recommended approach as per Microsoft documentation for implementing custom policies. https://learn.microsoft.com/en-us/entra/identity/domain-services/manage-group-policy

deploy custom Group Policy settings to all the COMPUTERS in the domain. Answer : SO when you create a new gpo and link to the domain it will be applied to both users and computers. As it is required only for the computers in the domain you need to modify the existing Computers GPO which is the fit answer.

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy A user account that's a member of the Azure AD DC administrators group in your Azure AD tenant (Before you begin) hese built-in GPOs can be customized to configure specific group policies on your managed domain. Right-select one of the GPOs, such as AADDC Computers GPO, then choose Edit.... (Open the Group Policy Management Console and edit an object) Answer is correct

Keyword is ADDS. Not on-on-premises DS or hybrid. Therefore, the only option is ADDS admin and AD GPO.

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy -- clearly shows

Given is Correct.

Is a custom GPO thats requested. 1. = AADDC Admin 2. Creating a new gpo <--