Your company has three offices. Each office is configured as an Active Directory site. The network
consists of one Active directory domain. All domain controllers run Windows Server 2008 R2. The
company has five departments. You use a domain-level Group Policy object (GPO) to install
Microsoft Office on all client computers.
You need to deploy a GPO strategy to meet the following requirements:
• Install a custom application in one of the departments.
• Restrict access to removable storage devices for all users.

• Implement separate Windows Internet Explorer proxy settings for each physical location.
The strategy must maintain all settings applied by the existing GPOs.
What should you do?

A.
Create a new group for each department. Create a new GPO for each site. Create a new GPO for
the domain and use the GPO to install the custom application.

B.
Create a new organizational unit (OU) for each department. Create a new GPO for each site and a
new GPO for the domain. Create a GPO for one department OU and use the GPO to install the
application.

C.
Create a new organizational unit (OU) for each department. Create a single GPO for all the sites
and a new GPO for the domain. Create a single GPO for each department OU and use the GPO to
install the custom application.

D.
Create a new child domain for each department. Create a new GPO for each site and a new GPO
for each new child domain. Create a single GPO for all the new child domains and use the GPO to
install the custom application.

Explanation:
To install a custom application in one of the departments using GPO, you need to create a new
organizational unit (OU) for each department and then create a GPO for that department OU and
use that GPO to install the application. Next to restrict access to removable storage devices for all
users you need to a new GPO for the domain and configure it to restrict access to removable storage
devices for all users. You cannot use the already existing GPO because you want to maintain all
settings applied by the existing GPOs. To implement separate IE proxy settings for each physical
location, you need to create a new GPO for each site and use it to configure separate IE proxy
settings for each physical location. Therefore, to accomplish the desired goal you need to, create a
new organizational unit (OU) for each department, site, a new GPO for the domain, and a GPO for
one department OU and use the GPO for the department OU to install the application