Which of the following is the correct process for making Group Policy conform to an organization's security policy?

Question $12$ options:

Identify GPO settings in the default Windows templates that satisfy part of your security policy and activate them. Identify elements in your security policy that do not exist in the default Windows templates and create new GPOs.

Activate all GPO settings and then deactivate those that do not conform to your security policy.

Identify GPO settings in the default Windows templates that satisfy part of your security policy and activate them. Track elements in your security policy that do not exist in the default Windows templates.

Identify GPO settings that are already activated and modify your security policy accordingly.