Hell I might be crazy, but the following question and explanation I find very confusing.

It is said in the explanation that editing the GPOs applied to any domain does not have any effect.
But still it gives as the right answer : Recofigure the domain GPO and set Unsigned............
Very confusing