Your network consists of a single Active Directory domain. The domain contains three organizational
units (OUs) named Test, Application, and Database. You need to redesign the layout of the OUs to
support the following requirements:
– Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers
located in the
Applications OU
– Minimize the number of GPOs
– Minimize the number of Ous
What should you include in your design?

A.
Create a Starter GPO.

B.
Create a Windows Management Instrumentation (WMI) filter.

C.
Delegate permissions on the Application OU.

D.
Configure block inheritance on the Application OU.

Explanation:

Understanding Group Policy
You already know that Group Policy settings contained in Group Policy objects (GPOs) can be linked
to OUs, and that OUs can either inherit settings from parent OUs or block inheritance and obtain
their specific settings from their own linked GPOs. You also know that some policies—specifically,
security policies—can be set to “no override” so that they cannot be blocked or overwritten and
force child OUs to inherit the settings from their parents.