Your company has a single Active Directory forest with a single domain. Consultants in different departments of
the company require access to different network resources. The consultants belong to a global group named
TempWorkers. Three file servers are placed in a neworganizational unit named SecureServers. The file
servers contain confidential data in shared folders.
You need to prevent the consultants from accessing the confidential data.
What should you do?

A.
Create a new Group Policy Object (GPO) and link it to the SecureServers organizational unit. Assign the
Deny access to this computer from the network user right to the TempWorkers global group.

B.
Create a new Group Policy Object (GPO) and link it to the domain. Assign the Deny access to this computer
from the network user right to the TempWorkers global group.

C.
On the three file servers, create a share on the root of each hard disk. Configure the Deny Full control
permission for the TempWorkers global group on the share.

D.
Create a new Group Policy Object (GPO) and link it to the domain. Assign the Deny log on locally user right
to the TempWorkers global group.

E.
Create a new Group Policy Object (GPO) and link it to the SecureServers organizational unit. Assign the
Deny log on locally user right to the TempWorkers global group.

Explanation:
Same question as D/Q8. Same answer. The other options give the consultants too much or too little rights.