Question

You are the network administrator for your network. Your network consists of a single Active Directory domain. Your company recently mandated the following user account criteria:

User accounts must be deactivated after three unsuccessful logon attempts.
User account passwords must be at least 12 characters long.
User accounts must be manually reset by an administrator once they are locked out.
You must make the changes to affect everyone in the domain. You are editing the Default Domain Group Policy object.
What should you do? (Choose three. Each correct choice represents part of the solution.)
Enable Password must meet complexity requirements.

Set Account lockout threshold to 3.

Set Account lockout threshold to 0.

Set Account lockout duration to 0.

Answer 1

Set Account lockout threshold to 3

Set Account lockout duration to 0.

To comply with new user account policies, edit the Default Domain Policy to set the Account lockout threshold to 3, enable password complexity requirements, and set the Account lockout duration to 0.

Step-by-step explanation:

To address the company's new user account criteria in a single Active Directory domain, you'll need to make three specific changes to the Default Domain Group Policy object.

Firstly, set the Account lockout threshold to 3. This defines the number of unsuccessful logon attempts that will cause a user account to be locked.

Secondly, you need to enable the setting that passwords must meet complexity requirements to ensure that newly created or updated passwords are at least 12 characters long and follow complexity guidelines.

Lastly, set the Account lockout duration to 0. This will require an administrator to manually unlock the account, as the lockout duration specifies the number of minutes a locked-out account remains locked out before automatically becoming unlocked.

To comply with new user account policies, edit the Default Domain Policy to set the Account lockout threshold to 3, enable password complexity requirements, and set the Account lockout duration to 0.