Question
Your network contains a Microsoft Entra Domain Services domain named sk230128outlook.onmicrosoft.com. The domain contains a server named Server1 that runs Windows Server.
You have the users shown in the following table.
The domain contains the Group Policy Objects (GPOs) shown in the following exhibit.
The minimum password length for each GPO is configured as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
| Name | Description |
| --- | --- |
| User1 | Domain user in the AADDC Users organizational unit (OU) |
| User2 | Local user on Server1 |
| User3 | Domain user in an organizational unit (OU) named OU1 |
| GPO | Value |
| --- | --- |
| Default Domain Policy | 9 |
| AADDC Computers GPO | 7 |
| AADDC Users GPO | 10 |
| Default Domain Controllers Policy | 12 |
| GPO1 | 13 |
Explanation
Statement 1 (No): Password settings are in the Computer Configuration part of a GPO. For domain accounts, domain controllers apply only the account policy linked at the domain level, or a fine-grained password policy that applies to the user. In a Microsoft Entra Domain Services managed domain, the passwords of users synced from Microsoft Entra ID are set in Microsoft Entra ID. The AADDC Users GPO is linked to an OU, and it holds users rather than computers, so its 10-character setting does not apply to User1's domain password.
Statement 2 (Yes): User2 is a local account on Server1. Local accounts follow the account policy that applies to the computer, including GPOs linked to the computer's OU. Server1 is domain-joined, so it is in AADDC Computers by default, and AADDC Computers GPO requires at least seven characters (every other GPO that could reach Server1 requires more). User2's new password must therefore have at least seven characters.
Statement 3 (No): GPO1 is linked to OU1. An account policy linked to an OU affects only local accounts on computers in that OU, not domain user accounts placed in the OU. GPO1's 13-character minimum therefore does not apply to User3's domain password.
