Securing Windows Server 2016 — Question 103

Your network contains an Active Directory domain named contoso.com. The domain contains domain controllers that run Windows Server 2016.
A Group Policy object (GPO) named GPO1 is applied to all of the domain controllers. GPO1 has a Globally Unique Identifier (GUID) of 6AC1786C-016F-11D2-
945F-00C04fB984F9.
You need to create a new baseline that contains the settings from GPO1.
What should you do first?

Answer options

• A. Copy the \\contoso.com\sysvol\contoso.com\Policies\{6AC1786C-016F-11D2-945F-00CO4fB984F9} folder to Server1.
• B. From Group Policy Management, create a backup of GPO1.
• C. From Microsoft Security Compliance Manager, associate a baseline. parameter.

Correct answer: B

Explanation

The correct answer is B because creating a backup of GPO1 is the necessary first step before establishing a new baseline from its settings. Option A is incorrect as copying the folder does not formally back up the GPO and may lead to configuration inconsistencies. Option C is also incorrect since associating a baseline requires a prior backup of the GPO to ensure accurate settings integration.