Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?
A. Run the Device Guard and Credential Guard hardware readiness tool
B. Disable the Turn on Virtual nation Based Security group policy setting
C. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters
