Securing Windows Server 2016 — Question 156

Your network contains an Active Directory domain named contoso.com. The domain contains domain controllers that run Windows Server 2016.
A Group Policy object (GPO) named GPO1 is applied to all of the domain controllers. GPO1 has a Globally Unique Identifier (GUID) of 6AC1786C-016F-11D2-
945F-00C04fB984F9.
You need to create a new baseline that contains the settings from GPO1.
What should you do first?

Answer options

• A. Copy the \\contoso.com\sysvol\contoso.com\Policies\{6AC1786C-016F-11D2-945F-00CO4fB984F9} folder to Server1.
• B. From Windows PowerShell, run the Backup-GPO cmdlet.
• C. Modify the permissions of the \\contoso.com\sysvol\contoso.com\Policies\6AC1786-016F-11D2-945F-00C04fB984F9) folder.
• D. From Windows PowerShell, run the Copy-GPO cmdlet.

Correct answer: B

Explanation

The correct answer is B, as using the Backup-GPO cmdlet is the appropriate method to create a backup of the Group Policy object settings. Options A, C, and D are not suitable as they either involve copying folders, modifying permissions, or copying the GPO without first backing it up, which does not meet the requirement of creating a new baseline.