Administering Windows Server 2012 — Question 57

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group named Group1 contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?

Answer options

• A. Dcgpofix
• B. Get-GPOReport
• C. Gpfixup
• D. Gpresult
• E. Gpedit. msc
• F. Import-GPO
• G. Restore-GPO
• H. Set-GPInheritance
• I. Set-GPLink
• J. Set-GPPermission K. Gpupdate L. Add-ADGroupMember

Correct answer: J

Explanation

The correct answer is J, Set-GPPermission, because it allows you to modify the permissions on a GPO to control which groups can apply it. The other options do not specifically provide a way to grant or restrict GPO application based on group membership.