Which component is used to define a common security boundary within a domain in Active Directory's logical structure?

Which component is used to define a common security boundary within a domain in Active Directory's logical structure?

• A. Schemas
• B. Global Catalog
• C. Organizational Units
• D. Sites

Answer: (C)

Organizational Units are the level at which you carve administrative and policy scope inside a domain. Within a domain, an OU acts as a container you can nest and populate with users, groups, computers, and even other OUs. Because you can link Group Policy Objects to an OU, and control inheritance or apply security filtering, the objects inside that OU share a common set of policies and delegated administrative rights. In this way, an OU creates a focused boundary for how security settings and administration apply to a subset of the domain’s objects, while still being part of the same domain. Schemas determine what kinds of objects and attributes can exist in the directory, the Global Catalog provides a forest-wide, searchable index of objects, and Sites manage replication and logon traffic across the network. None of these define a comparable boundary for policy and administrative control within a domain in the same way an Organizational Unit does.

Organizational Units are the level at which you carve administrative and policy scope inside a domain. Within a domain, an OU acts as a container you can nest and populate with users, groups, computers, and even other OUs. Because you can link Group Policy Objects to an OU, and control inheritance or apply security filtering, the objects inside that OU share a common set of policies and delegated administrative rights. In this way, an OU creates a focused boundary for how security settings and administration apply to a subset of the domain’s objects, while still being part of the same domain.

Schemas determine what kinds of objects and attributes can exist in the directory, the Global Catalog provides a forest-wide, searchable index of objects, and Sites manage replication and logon traffic across the network. None of these define a comparable boundary for policy and administrative control within a domain in the same way an Organizational Unit does.