Why might it be necessary to have a dedicated organizational unit for finance in an Active Directory setup?

• A. To increase the number of domain controllers
• B. To allow specific security policies and access to be enforced
• C. To ensure all finance users are logged at the same time
• D. To keep track of financial transactions

Answer: (B)

Having a dedicated organizational unit (OU) for finance in an Active Directory setup is essential primarily because it allows specific security policies and access to be enforced tailored to the needs of that department. By creating a separate OU for finance, organizations can establish distinct permissions and policies that apply only to users within that unit.

This means that sensitive financial data and applications can be better protected through enforced security measures such as stronger password policies, restricted access to certain files or locations, and the assignment of security groups that limit or grant access according to the role and responsibilities of users working in finance. This is crucial in maintaining compliance with regulations and safeguarding financial information from unauthorized access.

The other options, while they might touch upon aspects of an organization's structure, do not directly relate to the primary benefits of dedicated organizational units in this context. For instance, increasing the number of domain controllers relates more to redundancy and load balancing rather than departmental security. Ensuring all finance users are logged at the same time is not a practical necessity for Active Directory structure, and while tracking financial transactions might be a functional requirement, it does not pertain to the organizational setup within Active Directory itself.