What is Active Directory and what is a Group Policy Object (GPO) used for?

What is Active Directory and what is a Group Policy Object (GPO) used for?

• A. AD is a DNS service; GPO stores user passwords
• B. AD is a virtualization platform; GPO manages disks
• C. AD is a directory service for centralized authentication/authorization; GPO configures settings across users/computers
• D. AD is a firewall; GPO defines routing

Answer: (C)

Active Directory is a directory service that centralizes authentication and authorization for users, computers, and resources in a Windows network. It provides a centralized store of identities, access rights, and policies, making it possible to manage many objects from one place. A Group Policy Object is a set of configurable settings you apply to users or computers within Active Directory. By linking a GPO to a domain, site, or organizational unit, you enforce policies across all accounts and machines in that scope. GPOs organize policy settings into Computer Configuration (applied at startup) and User Configuration (applied at logon), covering things like security options, desktop environment, software installation, and startup/shutdown scripts. They can be filtered and ordered to control exactly how and when policies take effect. The other descriptions don’t fit because Active Directory’s role is not simply DNS or firewall functions, and Group Policy Objects don’t store passwords, manage disks, or define routing.

Active Directory is a directory service that centralizes authentication and authorization for users, computers, and resources in a Windows network. It provides a centralized store of identities, access rights, and policies, making it possible to manage many objects from one place.

A Group Policy Object is a set of configurable settings you apply to users or computers within Active Directory. By linking a GPO to a domain, site, or organizational unit, you enforce policies across all accounts and machines in that scope. GPOs organize policy settings into Computer Configuration (applied at startup) and User Configuration (applied at logon), covering things like security options, desktop environment, software installation, and startup/shutdown scripts. They can be filtered and ordered to control exactly how and when policies take effect.

The other descriptions don’t fit because Active Directory’s role is not simply DNS or firewall functions, and Group Policy Objects don’t store passwords, manage disks, or define routing.