When creating Organizational Units (OUs), which of the following is true about object permissions?

• A. Objects in a group cannot have permissions assigned
• B. Only OUs can have permissions assigned to them
• C. Individual objects can be assigned specific permissions
• D. An OU can be used to delegate permissions

Answer: (C)

The statement regarding individual objects being able to be assigned specific permissions is accurate because in many directory services, including Active Directory, individual objects within an Organizational Unit (OU) can indeed have specific permissions applied to them. This allows for granular control over access and management of resources, enabling administrators to define who can perform actions such as reading, writing, or modifying an object.

By assigning permissions at the object level, an organization can tailor security measures to meet their specific needs, ensuring that only authorized users can access sensitive information or perform critical actions. This capability is essential for maintaining security and operational efficiency within complex environments where different roles and responsibilities exist among users.

In contrast, while it is possible for OUs to have permissions associated with them, this does not limit permissions solely to OUs, thus reinforcing why individual objects can also have assigned permissions.