You have an Active Directory domain. All client computers run Windows 7 and are joined to the
domain. The help desk reports that several users recently downloaded and installed malware. You
discover that the users modified the Windows Defender settings on their computers. You need to
recommend a solution to prevent users from modifying their Windows Defender settings. What
should you recommend?

A.
Modify the User Account Control (UAC) settings.

B.
Modify the membership of the local Administrators group.

C.
From Program and Features, modify the Windows Features.

D.
From a Group Policy object (GPO), modify the Windows Defender settings.

Explanation:
changed answer from B.to D.
Chapter 5 Lesson 1 p 209 – 211
http://sourcedaddy.com/windows-7/configuring-windows-defender-group-policy.html