Q4
Single choice
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a
domain controller named DC1.
The domain uses Microsoft Entra Connect sync with a Microsoft Entra tenant and uses Microsoft Entra Password Protection to enforce a custom banned password list.
You deploy a new domain controller named DC2 to the domain.
You discover that the custom banned password list is applied inconsistently and often allows banned passwords to be used.
You need to ensure that the custom banned password list is always enforced.
What should you do on DC2?