Which OS Security Measure Quickly Implements Password Policy Updates?
A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the following operating system security measures will the administrator most likely use?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests knowledge of centralized management tools, and the trap is confusing PowerShell scripts (which automate tasks individually) with GPOs (which apply policy changes system-wide at once).
For rapidly applying password policy changes across an enterprise, pushing a Group Policy update (GPO) is the industry-standard Windows security measure. The CompTIA Security+ community strongly favors GPOs for centralized configuration management and consistent enforcement.
Choosing 'Deploying PowerShell scripts' is the most common mistake because scripts can also push changes, but they require per-system execution and lack the centralized, policy-based enforcement that GPOs provide for Windows password policies.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
GPOs are designed for centralized configuration management of Windows operating systems and applications. A Group Policy update can propagate a new password policy to all domain-joined systems quickly and uniformly, ensuring consistent enforcement across the enterprise. As commenter [2] noted, GPOs 'provide the necessary tools to enforce security settings consistently throughout the enterprise environment.'The infrastructure of Group Policy ensures that password policies (like length, complexity, and age) are applied at domain or organizational unit levels, making it the fastest and most reliable method for enterprise-wide change. For Windows environments, this is the standard approach for implementing security baselines.
Why the Other Options Are Wrong
Deploying PowerShell scripts (A) might be possible but lacks the centralized policy engine and effective immediate propagation of GPOs; scripts require distribution, execution, and error handling on each system. Enabling PAP (C) relates to remote authentication (Password Authentication Protocol), which is outdated and unrelated to password policy management. Updating EDR profiles (D) configures endpoint detection and response tools, not password policies.Community Comment Notes
All voter comments (100%) supported answer B. Commenter [1] emphasized that GPOs are a collection of settings defining system behavior and security for defined groups. Commenter [2] highlighted that pushing a GPO update 'allows the systems administrator to implement a new password policy across all systems quickly and efficiently.'The community consensus is clear that GPOs are the correct answer because they automate policy enforcement in a centralized, standardized manner—exactly what the question requires.
Official Reference
- https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh147307(v=ws.11)
- https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-inventory-asset-management
- https://support.microsoft.com/en-us/windows/what-is-group-policy-822ef7e1-2f29-37a8-5de9-79ef8469aabe
Exam Strategy
When answering questions about rapid enterprise-wide configuration changes, think about centralized management tools like Group Policy, Intune, or configuration management. Always distinguish between policy-based enforcement (GPO) and task automation (scripts) — GPOs apply settings persistently and centrally without requiring manual execution on each host.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →