Your network contains an Active Directory forest named contoso.com. The forest contains three
domains named contoso.com, corp.contoso.com, and ext.contoso.com. The forest contains three
Active Directory sites named Site1, Site2, and Site3. You have the three administrators as
described in the following table:
You create a Group Policy object (GPO) named GPO1. Which administrator or administrators can
link GPO1 to Site2?
A.
Admin1 and Admin2 only
B.
Admin1, Admin2, and Admin3
C.
Admin3 only
D.
Admin1 and Admin3 only
Explanation:
https://technet.microsoft.com/en-us/library/cc732979(v=ws.11).aspx
Answer should be C, Admin 3 only.
By default, Domain Admins don’t have Full Control permission on an Active Directory Site, but Enterprise Admins has. Therefore, only Enterprise Admins can link GPO to the site.
1
11
from explanation link provided, its say by default both domain admin and enterprise admin can link GPO to site.
7
0