Which OS Security Measure Quickly Implements Password Policy Updates?

SY0-701 By islever Editorial Last updated

Short answer

B Pushing GPO update

Question

A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the following operating system security measures will the administrator most likely use?
  1. Deploying PowerShell scripts
  2. Pushing GPO update Correct Answer
  3. Enabling PAP
  4. Updating EDR profiles

Key Takeaways

This question tests knowledge of centralized management tools, and the trap is confusing PowerShell scripts (which automate tasks individually) with GPOs (which apply policy changes system-wide at once).

For rapidly applying password policy changes across an enterprise, pushing a Group Policy update (GPO) is the industry-standard Windows security measure. The CompTIA Security+ community strongly favors GPOs for centralized configuration management and consistent enforcement.

Common mistake: Choosing 'Deploying PowerShell scripts' is the most common mistake because scripts can also push changes, but they require per-system execution and lack the centralized, policy-based enforcement that GPOs provide for Windows password policies.

Expert Analysis

Why the Answer Is Correct

GPOs are designed for centralized configuration management of Windows operating systems and applications. A Group Policy update can propagate a new password policy to all domain-joined systems quickly and uniformly, ensuring consistent enforcement across the enterprise. As commenter [2] noted, GPOs 'provide the necessary tools to enforce security settings consistently throughout the enterprise environment.'

The infrastructure of Group Policy ensures that password policies (like length, complexity, and age) are applied at domain or organizational unit levels, making it the fastest and most reliable method for enterprise-wide change. For Windows environments, this is the standard approach for implementing security baselines.

Why the Other Options Are Wrong

Deploying PowerShell scripts (A) might be possible but lacks the centralized policy engine and effective immediate propagation of GPOs; scripts require distribution, execution, and error handling on each system. Enabling PAP (C) relates to remote authentication (Password Authentication Protocol), which is outdated and unrelated to password policy management. Updating EDR profiles (D) configures endpoint detection and response tools, not password policies.

Community Comment Notes

All voter comments (100%) supported answer B. Commenter [1] emphasized that GPOs are a collection of settings defining system behavior and security for defined groups. Commenter [2] highlighted that pushing a GPO update 'allows the systems administrator to implement a new password policy across all systems quickly and efficiently.'

The community consensus is clear that GPOs are the correct answer because they automate policy enforcement in a centralized, standardized manner—exactly what the question requires.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When answering questions about rapid enterprise-wide configuration changes, think about centralized management tools like Group Policy, Intune, or configuration management. Always distinguish between policy-based enforcement (GPO) and task automation (scripts) — GPOs apply settings persistently and centrally without requiring manual execution on each host.

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. adderallpm 👍 11
    Group Policy Objects (GPOs) provides an infrastructure for centralized configuration management of the Windows operating system and applications that run on the operating system. GPOs are a collection of settings that define what a system will look like and how it will behave for a defined group of computers or users.
  2. dbrowndiver 👍 3 Answered B
    Pushing GPO update is the correct answer because it allows the systems administrator to implement a new password policy across all systems quickly and efficiently through centralized management. GPOs provide the necessary tools to enforce security settings consistently throughout the enterprise environment.
  3. Shaman73 👍 1 Answered B
    B. Pushing GPO update

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide