Identity with Windows Server 2016 — Question 22

Your company recently deployed a new child domain to an Active Directory forest.
You discover that a user modified the Default Domain Policy to configure several Windows components in the child domain.
A company policy states that the Default Domain Policy must be used only to configure domain-wide security settings.
You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO.
You need to restore the Default Domain Policy to the default settings from when the domain was first installed.
What should you do?

Answer options

• A. From Group Policy Management, click Starter GPOs, and then click Manage Backups.
• B. From a command prompt, run the dcgpofix.exe command.
• C. From Windows PowerShell, run the Copy-GPO cmdlet.
• D. Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.

Correct answer: B

Explanation

The correct answer is B because the dcgpofix.exe command is specifically designed to restore the Default Domain Policy and Default Domain Controllers Policy to their initial settings. The other options do not restore the policy to default. Option A pertains to managing GPO backups, Option C is for copying GPOs, and Option D is related to database maintenance, none of which address the restoration of the Default Domain Policy.