Exam 70-742 topic 1 question 111 discussion

right.

D. Any changes from the default policy should be done in AD Administrative Centre

Similar question from other source: Your network contains an Active Directory domain named contso.com. Each department at your company has an organizational unit (OU) in Active Directory and a global that contains the users in that department. You need to implement the following security requirements: User in the research department must use complex passwords that are at least 14 characters. User in the following department must use complex passwords that are at least 10 characters. All other users must use an eight-character, non-complex password. What should you do? A. From the Default Domain Controller Policy. Modify the Password Policy settings. Create Password settings objects (PSOs) for finance and research. B. From the Default Domain Policy, modify the password policy settings. Create password Settings objects PSOs) for finance and research C. Create group Policy object (GPOs) linked to the finance and research OUs. Modify the Password Policy settings in the Default Domain Policy, the finance GPO and the research GPO. D .Create Group Policy objects (GPOs) linked to the finance and research OUs. Modify the Password Policy settings in the finance GPO and the research GPO. Offered Answer: A Is this correct?

I think that A and B are also correct in the following case.. --Adatum.com as domain has no other security groups. --Adatum.com as domain has other security groups and they have no member. To determine that only D is correct, does it need the prerequiset that only the research department users change...... ? Or since A and B does'nt include update operation, for example, using gpupdate,they are not correct ? Or if there are multiple correct answer, the best answer is correct ? or has no other security groups but they have no member, A and B can meet the goal.