Administering Windows Server 2012 — Question 50

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012 R2. The forest contains a single domain.
You create a Password Settings object (PSO) named PSO1.
You need to delegate the rights to apply PSO1 to the Active Directory objects in an organizational unit named OU1.
What should you do?

Answer options

• A. From Active Directory Users and Computers, run the Delegation of Control Wizard.
• B. From Active Directory Administrative Center, modify the security settings of PSO1.
• C. From Group Policy Management, create a Group Policy object (GPO) and link the GPO to OU1.
• D. From Active Directory Administrative Center, modify the security settings of OU1.

Correct answer: B

Explanation

The correct answer is B because you need to modify the security settings of the PSO to delegate the application rights to the relevant Active Directory objects. Options A and D deal with delegating control at different levels that do not specifically target the PSO, while option C relates to Group Policy, which is not applicable in this case.