Which action would typically apply a GPO to all objects within a domain?

• A. Linking the GPO at the domain root
• B. Creating a new user account
• C. Uninstalling Group Policy
• D. Enabling firewall rules only on servers

Answer: (A)

This question hinges on how Group Policy objects are applied in Active Directory. A GPO’s reach is determined by where it’s linked. If you link a GPO at the domain root, it becomes part of the domain’s policy for everything beneath that root, so every user and computer in the domain receives it (assuming no filtering or inheritance blocks). This is the standard way to apply a policy domain-wide, with the option to tighten scope later by moving the link to specific organizational units or by using security or WMI filtering.

Creating a new user account, uninstalling Group Policy, or enabling firewall rules only on servers wouldn’t by themselves apply a policy to all domain objects. The first creates a user, not a policy; the second removes policy application; the third targets only a subset (servers), not the whole domain.