Which term describes the part of Active Directory's structure that groups resources based on administrative boundaries and policies?

Which term describes the part of Active Directory's structure that groups resources based on administrative boundaries and policies?

• A. Logical structure
• B. Physical structure
• C. Site topology
• D. Domain naming context

Answer: (A)

In Active Directory, resources are organized along two dimensions: physical and logical. The term that describes grouping resources by administrative boundaries and policies is the logical structure. This encompasses domains and organizational units, which are specifically used to delegate administration and apply policies like Group Policy across subsets of objects. OUs let admins assign permissions and policies to a targeted set of users and computers without impacting others, while domains create a broader boundary for security and policy scope. The other terms refer to different aspects: physical structure covers the actual hardware/network layout; site topology deals with network sites and how replication traffic flows between them; domain naming context is the naming partition that holds the DNS-based naming information for a domain, used for directory replication and naming, not for organizing administrative boundaries or policies.

In Active Directory, resources are organized along two dimensions: physical and logical. The term that describes grouping resources by administrative boundaries and policies is the logical structure. This encompasses domains and organizational units, which are specifically used to delegate administration and apply policies like Group Policy across subsets of objects. OUs let admins assign permissions and policies to a targeted set of users and computers without impacting others, while domains create a broader boundary for security and policy scope.

The other terms refer to different aspects: physical structure covers the actual hardware/network layout; site topology deals with network sites and how replication traffic flows between them; domain naming context is the naming partition that holds the DNS-based naming information for a domain, used for directory replication and naming, not for organizing administrative boundaries or policies.