SSCVA Day 1 - Windows Server Hardening

A Group Policy setting is applied at the Organizational Unit (OU) level that conflicts with a setting at domain level

Which of the following best describes the role of a Windows Server Domain Controller?

To prevent unauthorized software from running on Windows Servers. Which Group Policy setting can do it?

What security policy should be enforced to prevent brute-force attacks on user login password?

To enforce security policies across all Windows computers in its network. Which Windows feature can do it efficiently?