Which feature in Active Directory enables centralized security policies and software deployment?

Which feature in Active Directory enables centralized security policies and software deployment?

• A. Group Policy Objects.
• B. DNS Zones.
• C. Access Control Lists.
• D. Active Messaging Queues.

Answer: (A)

Group Policy Objects in Active Directory provide a centralized way to define and enforce security settings and deploy software across computers and users. A GPO lets administrators specify a wide range of settings—such as password policies, account lockout, user rights, and software installation or upgrade—and apply them consistently to all machines or users within a domain. By linking a GPO to an AD container like a domain, site, or organizational unit, the policies automatically flow to client machines during startup or logon and refresh at intervals, ensuring a standardized security posture and streamlined software deployment across the environment. DNS Zones, while essential for name resolution, don’t manage security policies or software deployment. Access Control Lists control permissions on objects but aren’t designed to distribute centralized policies or software. Active Messaging Queues aren’t a feature used for policy governance in Active Directory.

Group Policy Objects in Active Directory provide a centralized way to define and enforce security settings and deploy software across computers and users. A GPO lets administrators specify a wide range of settings—such as password policies, account lockout, user rights, and software installation or upgrade—and apply them consistently to all machines or users within a domain. By linking a GPO to an AD container like a domain, site, or organizational unit, the policies automatically flow to client machines during startup or logon and refresh at intervals, ensuring a standardized security posture and streamlined software deployment across the environment.

DNS Zones, while essential for name resolution, don’t manage security policies or software deployment. Access Control Lists control permissions on objects but aren’t designed to distribute centralized policies or software. Active Messaging Queues aren’t a feature used for policy governance in Active Directory.