Which element is primarily associated with the logical structure of Active Directory?

Which element is primarily associated with the logical structure of Active Directory?

• A. Sites
• B. Forest
• C. Organizational Units
• D. Subnets

Answer: (C)

The key idea here is how Active Directory is organized for administration and policy control. Organizational Units are the containers inside a domain that form the logical structure you use to group users, computers, and other objects. They can be nested to reflect an organization’s real-world hierarchy (like departments or teams), and they’re where you link Group Policy Objects and delegate administrative permissions. This makes them the primary mechanism for controlling who can manage what and how policies apply, which is the essence of the logical structure. Sites, by contrast, relate to the physical layout of your network. They help with optimizing replication and logon traffic by mapping IP subnets to physical locations, not with how objects are administratively organized. Subnets are part of that physical mapping to sites. Forests define boundaries for trust and namespace across multiple domains, focusing on security and boundary scoping rather than the day-to-day logical organization of objects within a domain. So the element that best represents the logical organization of Active Directory is the Organizational Units.

The key idea here is how Active Directory is organized for administration and policy control. Organizational Units are the containers inside a domain that form the logical structure you use to group users, computers, and other objects. They can be nested to reflect an organization’s real-world hierarchy (like departments or teams), and they’re where you link Group Policy Objects and delegate administrative permissions. This makes them the primary mechanism for controlling who can manage what and how policies apply, which is the essence of the logical structure.

Sites, by contrast, relate to the physical layout of your network. They help with optimizing replication and logon traffic by mapping IP subnets to physical locations, not with how objects are administratively organized. Subnets are part of that physical mapping to sites. Forests define boundaries for trust and namespace across multiple domains, focusing on security and boundary scoping rather than the day-to-day logical organization of objects within a domain.

So the element that best represents the logical organization of Active Directory is the Organizational Units.