SANS Global Industrial Cyber Security Professional (GICSP) Practice Test

Group Policy Objects (GPOs) are a crucial element in the management of users and computers in a network environment, particularly within Active Directory structures. They are applied at multiple points in time to ensure appropriate policies are enforced consistently.

The correct answer highlights that GPOs are applied at boot up, during user login, and consistently throughout session activity (every 90 to 120 minutes) while the system is live. This means that whenever a computer starts up, it will retrieve the applicable GPOs to configure system settings, security, and behavior according to the organization’s policies. After login, the GPOs are re-evaluated, allowing for any changes that might have occurred since the last application, ensuring real-time policy enforcement.

The periodic reapplication of GPOs (every 90 to 120 minutes) serves to accommodate any changes in policies, including updates or revisions made by administrators or changes in the environment, further ensuring that all users and systems remain compliant with security and operational guidelines.

In contrast, applying GPOs only at system startup would not allow for dynamic changes or updates, making it impractical for maintaining compliance in a changing environment. Similarly, applying GPOs just before network login would not account for updates needed