AD DS Delegation of Control Quiz

What you'll be asked

1. Which tool is the most common and user-friendly method for delegating control over organizational units (OUs) in Active Directory?
2. When you delegate 'Reset password' permissions to a helpdesk group for a specific OU, what is the minimum scope of the delegation?
3. A junior administrator needs to be able to create and delete computer objects in a specific OU. Which permission is required to ensure they can manage these objects effectively?
4. What is the primary security risk of delegating the 'Full Control' permission on an Organizational Unit?
5. You have delegated 'Reset Password' permissions on an OU, but the helpdesk still cannot reset passwords for users who are members of protected groups (like Account Operators). Why?

Answers and explanations come after you submit.