Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Serverl that has
Microsoft Security Compliance Manager (SCM) 4.0 installed. The domain contains domain controllers that run
Windows Server 2016.
A Group Policy object (GPO) named GPO1 is applied to all of the domain controllers.
GPO1 has a Globally Unique Identifier (GUID) of 7ABCDEFG-1234-5678-90AB-005056123456.
You need to create a new baseline that contains the settings from GPO1. What should you do first?

A.
Copy the \\\\contoso.com\\sysvol\\contoso.com\\Policies\\{7ABCDEFG-1234-5678-90AB-005056123456} folder
to Server1.

B.
From Group Policy Management, create a backup of GPO1.

C.
From Windows PowerShell, run the Copy-GPO cmdlet

D.
Modify the permissions of the \\\\contoso.com\\sysvol\\contoso.com\\Policies\\{7ABCDEFG-1234-5678-90AB-
005056123456}

Explanation:
https://technet.microsoft.com/en-us/library/hh489604.aspx
Import Your GPOs
You can import current settings from your GPOs and compare these to the Microsoft recommended best
practices.
Start with a GPO backup that you would commonly create in the Group Policy Management Console
(GPMC).
Take note of the folder to which the backup is saved. In SCM, select GPO Backup, browse to the GPO
folder’s Globally Unique Identifier (GUID) and select a
name for the GPO when it’s imported.
SCM will preserve any ADM files and GP Preference files (those with non-security settings that SCM doesn’t
parse) you’re storing with your GPO backups.
It saves them in a subfolder within the user’s public folder. When you export the baseline as a GPO again, it
also restores all the associated files.