Question 3
Your network contains an Active Directory forest named contoso.com. The forest contains three domains named contoso.com, corp.contoso.com, and ext.contoso.com. The forest contains three Active Directory sites named Site1, Site2, and Site3.
You have the three administrators as described in the following table.
You create a Group Policy object (GPO) named GPO1.
Which administrator or administrators can link GPO1 to Site2?
Admin1, Admin2, and Admin3
Correct answer: D
Explanation:
To link an existing GPO to a site, domain, or OU, you must have Link GPOs permission on that site, domain, or OU. By default, only domain administrators and enterprise administrators have this privilege for domains and OUs. Enterprise administrators and domain administrators of the forest root domain have this privilege for sites. References:https://technet.microsoft.com/en-us/library/cc732979(v=ws.11).aspx
To link an existing GPO to a site, domain, or OU, you must have Link GPOs permission on that site, domain, or OU. By default, only domain administrators and enterprise administrators have this privilege for domains and OUs. Enterprise administrators and domain administrators of the forest root domain have this privilege for sites.
References:
https://technet.microsoft.com/en-us/library/cc732979(v=ws.11).aspx