You need to design a security strategy that will ensure that unauthorized users cannot access personnel data. Your solution must comply with security requirements and the company’s new administrative model.
What should you do?

A.
In the Default Domain Policy Group Policy object (GPO) for the corp.woodgrovebank.com domain, add the LAHRUsers group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list.

B.
In the Default Domain Policy Group Policy object (GPO) for the la.corp.woodgrovebank.com domain, add the LAHRUsers group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list.

C.
In the Default Domain Policy Group Policy object (GPO) for the corp.woodgrovebank.com domain, add the LAHRUsers group and the CORPBackup Operators group to the Restricted Groups list. Add only the HR department user accounts and the administrator user accounts to the Allowed Members list for each group.

D.
In the Default Domain Policy Group Policy object (GPO) for the la.corp.woodgrovebank.com domain, add the LAHRUsers group and the CORPBackup Operators group to the Restricted Groups list. Add only the HR department user accounts to the Allowed Members list for the LAHRUsers group. Add only the administrator user accounts to the Allowed Members list for the CORPBackup Operators group.